CVE-2004-0883

Description

Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.

6.4

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 19.54% Top 5%

Vendor Advisory debian.org Vendor Advisory mandriva.com Vendor Advisory fedora.us Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory debian.org Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/20163	third party advisory
http://www.securityfocus.com/bid/11695	patch vendor advisory vdb entry
http://www.debian.org/security/2006/dsa-1082	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:022	vendor advisory
http://marc.info/?l=bugtraq&m=110072140811965&w=2	mailing list
https://bugzilla.fedora.us/show_bug.cgi?id=2336	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10330	signature vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18136	vdb entry
http://security.e-matters.de/advisories/142004.html
http://www.debian.org/security/2006/dsa-1070	vendor advisory
http://www.redhat.com/support/errata/RHSA-2004-537.html	patch vendor advisory
http://secunia.com/advisories/20162	third party advisory
http://www.kb.cert.org/vuls/id/726198	third party advisory us government resource
http://www.debian.org/security/2006/dsa-1067	vendor advisory
http://www.debian.org/security/2006/dsa-1069	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18135	vdb entry
http://www.redhat.com/support/errata/RHSA-2004-505.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18134	vdb entry
http://secunia.com/advisories/20202	third party advisory
http://www.redhat.com/support/errata/RHSA-2004-504.html	vendor advisory
http://marc.info/?l=bugtraq&m=110082989725345&w=2	mailing list
http://secunia.com/advisories/13232/	third party advisory
http://secunia.com/advisories/20338	third party advisory

Frequently Asked Questions

What is the severity of CVE-2004-0883?: CVE-2004-0883 has been scored as a medium severity vulnerability.
How to fix CVE-2004-0883?: To fix CVE-2004-0883, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0883 being actively exploited in the wild?: It is possible that CVE-2004-0883 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~20% probability that this vulnerability will be exploited by malicious actors in the next 30 days.