CVE-2004-0930

Samba - Authenticated Denial of Service via ms_fnmatch Wildcard Handling

Title source: llm

Description

The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.

References (15)

Core 15

Core References

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://www.ubuntu.com/usn/usn-22-1/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/17987

Vendor Advisory vendor-advisory x_refsource_mandrake

http://www.mandriva.com/security/advisories?name=MDKSA-2004:131

Vendor Advisory vendor-advisory x_refsource_conectiva

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899

Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1

Mailing List vendor-advisory x_refsource_openpkg

http://marc.info/?l=bugtraq&m=110330519803655&w=2

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/11624

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2004_40_samba.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936

Various Sources vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=109993720717957&w=2

Scores

EPSS 0.0606

EPSS Percentile 90.8%

Details

Status published

Products (22)

conectiva/linux 10.0

gentoo/linux

redhat/enterprise_linux 2.1 (6 CPE variants)

redhat/enterprise_linux 3.0 (3 CPE variants)

redhat/enterprise_linux_desktop 3.0

redhat/fedora_core core_2.0

redhat/fedora_core core_3.0

redhat/linux_advanced_workstation 2.1 (2 CPE variants)

samba/samba 3.0.0

samba/samba 3.0.3

... and 12 more

Published Jan 27, 2005

Tracked Since Feb 18, 2026