CVE-2008-4314
Published Dec 1, 2008
Last updated 14 years ago
Overview
- Description
- smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a "cut&paste error" that causes an improper bounds check to be performed.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 8.5
- Impact score
- 7.8
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Vendor comments
- Red HatNot vulnerable. This issue did not affect the versions of Samba as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBEA8397-6E23-49FE-9555-39C9599C6362"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "023C2353-750A-42FC-AC7E-115627E74AAB"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F28A8721-CA4A-44E1-B740-0B4610374CF6"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D93572BB-7F00-4137-A079-6FE96CD73F38"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44746973-3CFD-4808-9545-755E296EFF6B"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31E4627C-5D19-4599-B304-D0E4D4193170"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE162A7-969D-44D5-B9ED-764F20F19C87"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28DF45AE-DF03-4321-A019-D3BBC16433B6"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64D87AD2-89F2-455F-916E-D404E6BD02C0"
}
],
"operator": "OR"
}
]
}
]