Vulnerability Details CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 87.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://samba.org/samba/history/samba-2.2.11.html
- http://seclists.org/lists/bugtraq/2004/Sep/0003.html
- http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml
- http://www.trustix.org/errata/2004/0043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17138
- http://samba.org/samba/history/samba-2.2.11.html
- http://seclists.org/lists/bugtraq/2004/Sep/0003.html
- http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml
- http://www.trustix.org/errata/2004/0043
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17138
Products affected by CVE-2004-0829
-
cpe:2.3:a:samba:samba:1.9.17
-
cpe:2.3:a:samba:samba:1.9.18
-
cpe:2.3:a:samba:samba:2.0.0
-
cpe:2.3:a:samba:samba:2.0.1
-
cpe:2.3:a:samba:samba:2.0.2
-
cpe:2.3:a:samba:samba:2.0.3
-
cpe:2.3:a:samba:samba:2.0.4
-
cpe:2.3:a:samba:samba:2.0.5
-
cpe:2.3:a:samba:samba:2.0.5a
-
cpe:2.3:a:samba:samba:2.0.6
-
cpe:2.3:a:samba:samba:2.0.7
-
cpe:2.3:a:samba:samba:2.2.0
-
cpe:2.3:a:samba:samba:2.2.1
-
cpe:2.3:a:samba:samba:2.2.10
-
cpe:2.3:a:samba:samba:2.2.2
-
cpe:2.3:a:samba:samba:2.2.3
-
cpe:2.3:a:samba:samba:2.2.3a
-
cpe:2.3:a:samba:samba:2.2.4
-
cpe:2.3:a:samba:samba:2.2.5
-
cpe:2.3:a:samba:samba:2.2.6
-
cpe:2.3:a:samba:samba:2.2.7
-
cpe:2.3:a:samba:samba:2.2.7a
-
cpe:2.3:a:samba:samba:2.2.8
-
cpe:2.3:a:samba:samba:2.2.8a
-
cpe:2.3:a:samba:samba:2.2.9