FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1154

This CVE name corresponds to:

Entered	Topic
2004-12-21	samba -- integer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1154 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1154
Phase	Assigned(20041207)

Description

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

References

Source	Reference
IDEFENSE	20041216 Samba smbd Security Descriptor Integer Overflow Vulnerability
CONFIRM	http://www.samba.org/samba/security/CAN-2004-1154.html
APPLE	APPLE-SA-2005-03-21
DEBIAN	DSA-701
REDHAT	RHSA-2005:020
SCO	SCOSA-2005.17
SUNALERT	101643
SUNALERT	57730
SUSE	SUSE-SA:2004:045
CERT-VN	VU#226184
BID	11973
OVAL	oval:org.mitre.oval:def:1459
OVAL	oval:org.mitre.oval:def:642
OVAL	oval:org.mitre.oval:def:10236
SECUNIA	13453
XF	samba-msrpc-heap-corruption(18519)