ubuntu · CVE-2004-0882

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2004-0882 medium priority: Ubuntu including 3 source packages (linux-source-2.6.15, linux-source-2.6.17, samba), 12 status rows across 4 suites (dapper, edgy, feisty, upstream): DNE 4, needs-triage 3, not-affected 3, released 2.

Description:

Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.