← Database

CVE-2004-1154

CRITICAL CVSS: 10.0 Published: 2005-01-10 Modified: 2026-06-16

Description

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

Affected Platforms

Redhat Fedora CoreTrustix Secure LinuxSamba SambaSuse Suse Linux

Weakness Type

NVD-CWE-Other

References