Back to Database
Status published
Medium
CVE-2004-0930
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly...
Vulnerability Description
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0930
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.ubuntu.com/usn/usn-22-1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17987
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:131
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
- http://www.idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1
- http://marc.info/?l=bugtraq&m=110330519803655&w=2
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
- http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml
- http://www.securityfocus.com/bid/11624
- ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P
- http://www.novell.com/linux/security/advisories/2004_40_samba.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt
- http://marc.info/?l=bugtraq&m=109993720717957&w=2
More from samba
View All →CVE-2022-29869
cifs-utils through 6.14, with verbose logging, can cause an information...
Medium
5.3
CVE-2022-29154
An issue was discovered in rsync before 3.2.5 that allows...
High
7.4
CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing...
High
7.8
CVE-2021-43566
All versions of Samba prior to 4.13.16 are vulnerable to...
Low
2.5
CVE-2020-14342
It was found that cifs-utils' mount.cifs was invoking a shell...
Medium
4.4
Affected Vendor
samba
View all reports →Affected Software
samba, linux, enterprise linux, enterprise linux desktop, fedora core, linux advanced workstation
Vulnerable Versions:
3.0.0, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0, 3.0.1, 3.0.2, 10.0, 2.1, core_2.0, core_3.0
Timeline
Official Publish:
November 19th, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.