Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1154
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1154

2005-01-1000:00:00
ubuntu.com
ubuntu.com
12

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.111

Percentile

95.2%

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through
3.0.9 allows remote authenticated users to cause a denial of service
(application crash) and possibly execute arbitrary code via a Samba request
with a large number of security descriptors that triggers a heap-based
buffer overflow.

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.111

Percentile

95.2%