CVE-2008-1105

Samba <3.0.29 - Buffer Overflow

Title source: llm

Description

Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Guido Landi · perldosmultiple

https://www.exploit-db.com/exploits/5712

View Code ZIP pw:eip

References (52)

[Mailing List, Third Party Advisory] http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

[Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html

[Mailing List, Third Party Advisory] http://lists.vmware.com/pipermail/security-announce/2008/000023.html

[Third Party Advisory] http://secunia.com/advisories/30228

[Third Party Advisory] http://secunia.com/advisories/30385

[Third Party Advisory] http://secunia.com/advisories/30396

[Third Party Advisory] http://secunia.com/advisories/30442

[Third Party Advisory] http://secunia.com/advisories/30449

[Third Party Advisory] http://secunia.com/advisories/30478

[Third Party Advisory] http://secunia.com/advisories/30489

[Third Party Advisory] http://secunia.com/advisories/30543

[Third Party Advisory] http://secunia.com/advisories/30736

[Third Party Advisory] http://secunia.com/advisories/30802

[Third Party Advisory] http://secunia.com/advisories/30835

[Third Party Advisory] http://secunia.com/advisories/31246

[Third Party Advisory] http://secunia.com/advisories/31911

[Third Party Advisory] http://secunia.com/advisories/33696

[Third Party Advisory, Vendor Advisory] http://secunia.com/secunia_research/2008-20/advisory/

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200805-23.xml

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1020123

... and 32 more

Scores

EPSS 0.8573

EPSS Percentile 99.4%

Details

CWE

CWE-119

Status published

Products (6)

canonical/ubuntu_linux 6.06

canonical/ubuntu_linux 7.04

canonical/ubuntu_linux 7.10

canonical/ubuntu_linux 8.04

debian/debian_linux 4.0

samba/samba 3.0.0 - 3.0.29

Published May 29, 2008

Tracked Since Feb 18, 2026