Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2004-0686 (GCVE-0-2004-0686)
Vulnerability from cvelistv5 – Published: 2004-07-23 04:00 – Updated: 2024-08-08 00:24
VLAI
EPSS
VEX
Summary
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
16 references
Date Public
2004-07-22 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T00:24:27.106Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2004-0039",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX",
"x_transferred"
],
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"name": "CLA-2004:851",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA",
"x_transferred"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"name": "RHSA-2004:259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"name": "20040722 TSSA-2004-014 - samba",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"name": "CLA-2004:854",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA",
"x_transferred"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"name": "20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"name": "SUSE-SA:2004:022",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"name": "20040722 Security Release - Samba 3.0.5 and 2.2.10",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"name": "MDKSA-2004:071",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE",
"x_transferred"
],
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"name": "FLSA:2102",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"name": "samba-mangling-method-bo(16786)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"name": "SSRT4782",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"name": "GLSA-200407-21",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"name": "57664",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"name": "101584",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT",
"x_transferred"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"name": "oval:org.mitre.oval:def:10461",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL",
"x_transferred"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2004-07-22T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-10T00:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2004-0039",
"tags": [
"vendor-advisory",
"x_refsource_TRUSTIX"
],
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"name": "CLA-2004:851",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"name": "RHSA-2004:259",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"name": "20040722 TSSA-2004-014 - samba",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"name": "CLA-2004:854",
"tags": [
"vendor-advisory",
"x_refsource_CONECTIVA"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"name": "20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"name": "SUSE-SA:2004:022",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"name": "20040722 Security Release - Samba 3.0.5 and 2.2.10",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"name": "MDKSA-2004:071",
"tags": [
"vendor-advisory",
"x_refsource_MANDRAKE"
],
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"name": "FLSA:2102",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"name": "samba-mangling-method-bo(16786)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"name": "SSRT4782",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"name": "GLSA-200407-21",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"name": "57664",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"name": "101584",
"tags": [
"vendor-advisory",
"x_refsource_SUNALERT"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"name": "oval:org.mitre.oval:def:10461",
"tags": [
"vdb-entry",
"signature",
"x_refsource_OVAL"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0686",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2004-0039",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"name": "CLA-2004:851",
"refsource": "CONECTIVA",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"name": "RHSA-2004:259",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"name": "20040722 TSSA-2004-014 - samba",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"name": "CLA-2004:854",
"refsource": "CONECTIVA",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"name": "20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"name": "SUSE-SA:2004:022",
"refsource": "SUSE",
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"name": "20040722 Security Release - Samba 3.0.5 and 2.2.10",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"name": "MDKSA-2004:071",
"refsource": "MANDRAKE",
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"name": "FLSA:2102",
"refsource": "FEDORA",
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"name": "samba-mangling-method-bo(16786)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"name": "SSRT4782",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"name": "GLSA-200407-21",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"name": "57664",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"name": "101584",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"name": "oval:org.mitre.oval:def:10461",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2004-0686",
"datePublished": "2004-07-23T04:00:00.000Z",
"dateReserved": "2004-07-13T00:00:00.000Z",
"dateUpdated": "2024-08-08T00:24:27.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2004-0686",
"date": "2026-08-25",
"epss": "0.03666",
"percentile": "0.88788"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2004-0686\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2004-07-27T04:00:00.000\",\"lastModified\":\"2026-04-16T00:27:16.627\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \\\"mangling method = hash\\\" option is enabled in smb.conf, has unknown impact and attack vectors.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer en Samba 2.2.x a 2.2.9 y 3.0.0 a 3.0.4, cuando la opci\u00f3n \\\"mangling method = hash\\\" est\u00e1 establecida en smb.conf, con impacto y vectores de ataque desconocidos.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndExcluding\":\"2.2.10\",\"matchCriteriaId\":\"9DF58209-1ECB-4090-A263-C2B4AB552E29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.5\",\"matchCriteriaId\":\"4AEE1F34-E1DD-4365-86BB-5D7DA9242CC6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A67735E5-E43E-4164-BDB2-ADC6E0288E9F\"}]}]}],\"references\":[{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2004_22_samba.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2004-259.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.trustix.org/errata/2004/0039/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16786\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.novell.com/linux/security/advisories/2004_22_samba.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2004-259.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.trustix.org/errata/2004/0039/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/16786\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2025-11-21T13:33:18+00:00",
"cve": "CVE-2004-0686",
"id": "CVE-2004-0686",
"initial_release_date": "2004-07-22T00:00:00+00:00",
"product_status:fixed": "108",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "security flaw",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2004/cve-2004-0686.json",
"version": "3"
}
}
}
FKIE_CVE-2004-0686
Vulnerability from fkie_nvd - Published: 2004-07-27 04:00 - Updated: 2026-06-16 22:06
Severity
Summary
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| samba | samba | * | |
| samba | samba | * | |
| trustix | secure_linux | 1.5 | |
| trustix | secure_linux | 2.0 | |
| trustix | secure_linux | 2.1 |
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "cve@mitre.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9DF58209-1ECB-4090-A263-C2B4AB552E29",
"versionEndExcluding": "2.2.10",
"versionStartIncluding": "2.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4AEE1F34-E1DD-4365-86BB-5D7DA9242CC6",
"versionEndExcluding": "3.0.5",
"versionStartIncluding": "3.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*",
"matchCriteriaId": "39605B96-BAD6-45C9-BB9A-43D6E2C51ADD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A67735E5-E43E-4164-BDB2-ADC6E0288E9F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."
},
{
"lang": "es",
"value": "Desbordamiento de b\u00fafer en Samba 2.2.x a 2.2.9 y 3.0.0 a 3.0.4, cuando la opci\u00f3n \"mangling method = hash\" est\u00e1 establecida en smb.conf, con impacto y vectores de ataque desconocidos."
}
],
"id": "CVE-2004-0686",
"lastModified": "2026-06-16T22:06:09.687",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2004-07-27T04:00:00.000",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-7C6C-H82R-P2CF
Vulnerability from github – Published: 2022-04-29 02:58 – Updated: 2025-04-03 03:59
VLAI
Details
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
{
"affected": [],
"aliases": [
"CVE-2004-0686"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2004-07-27T04:00:00Z",
"severity": "MODERATE"
},
"details": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors.",
"id": "GHSA-7c6c-h82r-p2cf",
"modified": "2025-04-03T03:59:48Z",
"published": "2022-04-29T02:58:10Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0686"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"type": "WEB",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
},
{
"type": "WEB",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"type": "WEB",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"type": "WEB",
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"type": "WEB",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"type": "WEB",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"type": "WEB",
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"type": "WEB",
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"type": "WEB",
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"type": "WEB",
"url": "http://www.trustix.org/errata/2004/0039"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2004-0686
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2004-0686",
"description": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors.",
"id": "GSD-2004-0686",
"references": [
"https://www.suse.com/security/cve/CVE-2004-0686.html",
"https://access.redhat.com/errata/RHSA-2004:404",
"https://access.redhat.com/errata/RHSA-2004:259"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2004-0686"
],
"details": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors.",
"id": "GSD-2004-0686",
"modified": "2023-12-13T01:22:54.745922Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0686",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2004-0039",
"refsource": "TRUSTIX",
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"name": "CLA-2004:851",
"refsource": "CONECTIVA",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"name": "RHSA-2004:259",
"refsource": "REDHAT",
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"name": "20040722 TSSA-2004-014 - samba",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"name": "CLA-2004:854",
"refsource": "CONECTIVA",
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"name": "20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"name": "SUSE-SA:2004:022",
"refsource": "SUSE",
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"name": "20040722 Security Release - Samba 3.0.5 and 2.2.10",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"name": "MDKSA-2004:071",
"refsource": "MANDRAKE",
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"name": "FLSA:2102",
"refsource": "FEDORA",
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"name": "samba-mangling-method-bo(16786)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"name": "SSRT4782",
"refsource": "HP",
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"name": "GLSA-200407-21",
"refsource": "GENTOO",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"name": "57664",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"name": "101584",
"refsource": "SUNALERT",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"name": "oval:org.mitre.oval:def:10461",
"refsource": "OVAL",
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "2.2.10",
"versionStartIncluding": "2.2.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.0.5",
"versionStartIncluding": "3.0.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2004-0686"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2004:259",
"refsource": "REDHAT",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.redhat.com/support/errata/RHSA-2004-259.html"
},
{
"name": "GLSA-200407-21",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml"
},
{
"name": "MDKSA-2004:071",
"refsource": "MANDRAKE",
"tags": [
"Broken Link"
],
"url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071"
},
{
"name": "SUSE-SA:2004:022",
"refsource": "SUSE",
"tags": [
"Broken Link"
],
"url": "http://www.novell.com/linux/security/advisories/2004_22_samba.html"
},
{
"name": "2004-0039",
"refsource": "TRUSTIX",
"tags": [
"Third Party Advisory"
],
"url": "http://www.trustix.org/errata/2004/0039/"
},
{
"name": "CLA-2004:851",
"refsource": "CONECTIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000851"
},
{
"name": "CLA-2004:854",
"refsource": "CONECTIVA",
"tags": [
"Third Party Advisory"
],
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000854"
},
{
"name": "101584",
"refsource": "SUNALERT",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
},
{
"name": "57664",
"refsource": "SUNALERT",
"tags": [
"Broken Link"
],
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
},
{
"name": "FLSA:2102",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109785827607823\u0026w=2"
},
{
"name": "20040722 TSSA-2004-014 - samba",
"refsource": "BUGTRAQ",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109052891507263\u0026w=2"
},
{
"name": "SSRT4782",
"refsource": "HP",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109094272328981\u0026w=2"
},
{
"name": "20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba)",
"refsource": "BUGTRAQ",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051533021376\u0026w=2"
},
{
"name": "20040722 Security Release - Samba 3.0.5 and 2.2.10",
"refsource": "BUGTRAQ",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://marc.info/?l=bugtraq\u0026m=109051340810458\u0026w=2"
},
{
"name": "samba-mangling-method-bo(16786)",
"refsource": "XF",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16786"
},
{
"name": "oval:org.mitre.oval:def:10461",
"refsource": "OVAL",
"tags": [
"Third Party Advisory"
],
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2022-08-29T20:04Z",
"publishedDate": "2004-07-27T04:00Z"
}
}
}
RHSA-2004:259
Vulnerability from csaf_redhat - Published: 2004-07-22 11:02 - Updated: 2026-06-25 10:32Summary
Red Hat Security Advisory: samba security update
Severity
Important
Notes
Topic: Updated samba packages that fix buffer overflows, as well as other various
bugs, are now available.
Details: Samba provides file and printer sharing services to SMB/CIFS clients.
Evgeny Demidov discovered a flaw in the internal routine used by the Samba
Web Administration Tool (SWAT) in Samba versions 3.0.2 through 3.0.4. When
decoding base-64 data during HTTP basic authentication, an invalid base-64
character could cause a buffer overflow. If the SWAT administration
service is enabled, this flaw could allow an attacker to execute arbitrary
code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2004-0600 to this issue.
Additionally, the Samba team discovered a buffer overflow in the code used
to support the 'mangling method = hash' smb.conf option. Please be aware
that the default setting for this parameter is 'mangling method = hash2'
and therefore not vulnerable. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CAN-2004-0686 to this issue.
This release includes the updated upstream version 3.0.4 together with
backported security patches to correct these issues as well as a number of
post-3.0.4 bug fixes from the Samba subversion repository.
The most important bug fix allows Samba users to change their passwords
if Microsoft patch KB 828741 (a critical update) had been applied.
All users of Samba should upgrade to these updated packages, which
resolve these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3AS:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3Desktop:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3ES:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-client-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-common-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.i386 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.ia64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 3WS:samba-swat-0:3.0.4-6.3E.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated samba packages that fix buffer overflows, as well as other various\nbugs, are now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Samba provides file and printer sharing services to SMB/CIFS clients. \n \nEvgeny Demidov discovered a flaw in the internal routine used by the Samba\nWeb Administration Tool (SWAT) in Samba versions 3.0.2 through 3.0.4. When\ndecoding base-64 data during HTTP basic authentication, an invalid base-64\ncharacter could cause a buffer overflow. If the SWAT administration\nservice is enabled, this flaw could allow an attacker to execute arbitrary\ncode. The Common Vulnerabilities and Exposures project (cve.mitre.org) has\nassigned the name CAN-2004-0600 to this issue.\n\nAdditionally, the Samba team discovered a buffer overflow in the code used\nto support the \u0027mangling method = hash\u0027 smb.conf option. Please be aware\nthat the default setting for this parameter is \u0027mangling method = hash2\u0027\nand therefore not vulnerable. The Common Vulnerabilities and Exposures\nproject (cve.mitre.org) has assigned the name CAN-2004-0686 to this issue.\n\nThis release includes the updated upstream version 3.0.4 together with \nbackported security patches to correct these issues as well as a number of\npost-3.0.4 bug fixes from the Samba subversion repository. \n \nThe most important bug fix allows Samba users to change their passwords \nif Microsoft patch KB 828741 (a critical update) had been applied. \n \nAll users of Samba should upgrade to these updated packages, which\nresolve these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2004:259",
"url": "https://access.redhat.com/errata/RHSA-2004:259"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "102715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=102715"
},
{
"category": "external",
"summary": "114436",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=114436"
},
{
"category": "external",
"summary": "116560",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=116560"
},
{
"category": "external",
"summary": "117181",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=117181"
},
{
"category": "external",
"summary": "119211",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=119211"
},
{
"category": "external",
"summary": "121356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=121356"
},
{
"category": "external",
"summary": "122527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=122527"
},
{
"category": "external",
"summary": "122749",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=122749"
},
{
"category": "external",
"summary": "123271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=123271"
},
{
"category": "external",
"summary": "125714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=125714"
},
{
"category": "external",
"summary": "126296",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=126296"
},
{
"category": "external",
"summary": "127909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=127909"
},
{
"category": "external",
"summary": "128227",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=128227"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_259.json"
}
],
"title": "Red Hat Security Advisory: samba security update",
"tracking": {
"current_release_date": "2026-06-25T10:32:03+00:00",
"generator": {
"date": "2026-06-25T10:32:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.1.0"
}
},
"id": "RHSA-2004:259",
"initial_release_date": "2004-07-22T11:02:00+00:00",
"revision_history": [
{
"date": "2004-07-22T11:02:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2004-07-22T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-06-25T10:32:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS version 3",
"product": {
"name": "Red Hat Enterprise Linux AS version 3",
"product_id": "3AS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Desktop version 3",
"product": {
"name": "Red Hat Desktop version 3",
"product_id": "3Desktop",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 3",
"product": {
"name": "Red Hat Enterprise Linux ES version 3",
"product_id": "3ES",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 3",
"product": {
"name": "Red Hat Enterprise Linux WS version 3",
"product_id": "3WS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.ia64",
"product": {
"name": "samba-0:3.0.4-6.3E.ia64",
"product_id": "samba-0:3.0.4-6.3E.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.ia64",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.ia64",
"product_id": "samba-swat-0:3.0.4-6.3E.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.ia64",
"product": {
"name": "samba-common-0:3.0.4-6.3E.ia64",
"product_id": "samba-common-0:3.0.4-6.3E.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.ia64",
"product": {
"name": "samba-client-0:3.0.4-6.3E.ia64",
"product_id": "samba-client-0:3.0.4-6.3E.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.i386",
"product": {
"name": "samba-0:3.0.4-6.3E.i386",
"product_id": "samba-0:3.0.4-6.3E.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=i386"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.i386",
"product": {
"name": "samba-common-0:3.0.4-6.3E.i386",
"product_id": "samba-common-0:3.0.4-6.3E.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=i386"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.i386",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.i386",
"product_id": "samba-swat-0:3.0.4-6.3E.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=i386"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.i386",
"product": {
"name": "samba-client-0:3.0.4-6.3E.i386",
"product_id": "samba-client-0:3.0.4-6.3E.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.src",
"product": {
"name": "samba-0:3.0.4-6.3E.src",
"product_id": "samba-0:3.0.4-6.3E.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.x86_64",
"product": {
"name": "samba-0:3.0.4-6.3E.x86_64",
"product_id": "samba-0:3.0.4-6.3E.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.x86_64",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.x86_64",
"product_id": "samba-swat-0:3.0.4-6.3E.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.x86_64",
"product": {
"name": "samba-common-0:3.0.4-6.3E.x86_64",
"product_id": "samba-common-0:3.0.4-6.3E.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.x86_64",
"product": {
"name": "samba-client-0:3.0.4-6.3E.x86_64",
"product_id": "samba-client-0:3.0.4-6.3E.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.ppc64",
"product": {
"name": "samba-0:3.0.4-6.3E.ppc64",
"product_id": "samba-0:3.0.4-6.3E.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.ppc",
"product": {
"name": "samba-0:3.0.4-6.3E.ppc",
"product_id": "samba-0:3.0.4-6.3E.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.ppc",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.ppc",
"product_id": "samba-swat-0:3.0.4-6.3E.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.ppc",
"product": {
"name": "samba-common-0:3.0.4-6.3E.ppc",
"product_id": "samba-common-0:3.0.4-6.3E.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.ppc",
"product": {
"name": "samba-client-0:3.0.4-6.3E.ppc",
"product_id": "samba-client-0:3.0.4-6.3E.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.s390",
"product": {
"name": "samba-0:3.0.4-6.3E.s390",
"product_id": "samba-0:3.0.4-6.3E.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=s390"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.s390",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.s390",
"product_id": "samba-swat-0:3.0.4-6.3E.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=s390"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.s390",
"product": {
"name": "samba-common-0:3.0.4-6.3E.s390",
"product_id": "samba-common-0:3.0.4-6.3E.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=s390"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.s390",
"product": {
"name": "samba-client-0:3.0.4-6.3E.s390",
"product_id": "samba-client-0:3.0.4-6.3E.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "samba-0:3.0.4-6.3E.s390x",
"product": {
"name": "samba-0:3.0.4-6.3E.s390x",
"product_id": "samba-0:3.0.4-6.3E.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba@3.0.4-6.3E?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "samba-swat-0:3.0.4-6.3E.s390x",
"product": {
"name": "samba-swat-0:3.0.4-6.3E.s390x",
"product_id": "samba-swat-0:3.0.4-6.3E.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-swat@3.0.4-6.3E?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "samba-common-0:3.0.4-6.3E.s390x",
"product": {
"name": "samba-common-0:3.0.4-6.3E.s390x",
"product_id": "samba-common-0:3.0.4-6.3E.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-common@3.0.4-6.3E?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "samba-client-0:3.0.4-6.3E.s390x",
"product": {
"name": "samba-client-0:3.0.4-6.3E.s390x",
"product_id": "samba-client-0:3.0.4-6.3E.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/samba-client@3.0.4-6.3E?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.ppc"
},
"product_reference": "samba-0:3.0.4-6.3E.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.ppc64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.ppc64"
},
"product_reference": "samba-0:3.0.4-6.3E.ppc64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.s390"
},
"product_reference": "samba-0:3.0.4-6.3E.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.s390x"
},
"product_reference": "samba-0:3.0.4-6.3E.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.src as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.src"
},
"product_reference": "samba-0:3.0.4-6.3E.src",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-client-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.ppc"
},
"product_reference": "samba-client-0:3.0.4-6.3E.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.s390"
},
"product_reference": "samba-client-0:3.0.4-6.3E.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.s390x"
},
"product_reference": "samba-client-0:3.0.4-6.3E.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-client-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-common-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.ppc"
},
"product_reference": "samba-common-0:3.0.4-6.3E.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.s390"
},
"product_reference": "samba-common-0:3.0.4-6.3E.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.s390x"
},
"product_reference": "samba-common-0:3.0.4-6.3E.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-common-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.ppc as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.ppc"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.ppc",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.s390 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.s390"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.s390",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.s390x as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.s390x"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.s390x",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
"product_id": "3AS:samba-swat-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3AS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.src as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-0:3.0.4-6.3E.src"
},
"product_reference": "samba-0:3.0.4-6.3E.src",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-client-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-client-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-client-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-common-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-common-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-common-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.i386 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-swat-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.x86_64 as a component of Red Hat Desktop version 3",
"product_id": "3Desktop:samba-swat-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3Desktop"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.src as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-0:3.0.4-6.3E.src"
},
"product_reference": "samba-0:3.0.4-6.3E.src",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-client-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-client-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-client-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-client-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-common-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-common-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-common-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-common-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-swat-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-swat-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
"product_id": "3ES:samba-swat-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3ES"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.src as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-0:3.0.4-6.3E.src"
},
"product_reference": "samba-0:3.0.4-6.3E.src",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-client-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-client-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-client-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-client-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-client-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-client-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-common-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-common-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-common-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-common-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-common-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-common-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.i386 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-swat-0:3.0.4-6.3E.i386"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.i386",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.ia64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-swat-0:3.0.4-6.3E.ia64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.ia64",
"relates_to_product_reference": "3WS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "samba-swat-0:3.0.4-6.3E.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
"product_id": "3WS:samba-swat-0:3.0.4-6.3E.x86_64"
},
"product_reference": "samba-swat-0:3.0.4-6.3E.x86_64",
"relates_to_product_reference": "3WS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2004-0600",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617238"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:samba-0:3.0.4-6.3E.i386",
"3AS:samba-0:3.0.4-6.3E.ia64",
"3AS:samba-0:3.0.4-6.3E.ppc",
"3AS:samba-0:3.0.4-6.3E.ppc64",
"3AS:samba-0:3.0.4-6.3E.s390",
"3AS:samba-0:3.0.4-6.3E.s390x",
"3AS:samba-0:3.0.4-6.3E.src",
"3AS:samba-0:3.0.4-6.3E.x86_64",
"3AS:samba-client-0:3.0.4-6.3E.i386",
"3AS:samba-client-0:3.0.4-6.3E.ia64",
"3AS:samba-client-0:3.0.4-6.3E.ppc",
"3AS:samba-client-0:3.0.4-6.3E.s390",
"3AS:samba-client-0:3.0.4-6.3E.s390x",
"3AS:samba-client-0:3.0.4-6.3E.x86_64",
"3AS:samba-common-0:3.0.4-6.3E.i386",
"3AS:samba-common-0:3.0.4-6.3E.ia64",
"3AS:samba-common-0:3.0.4-6.3E.ppc",
"3AS:samba-common-0:3.0.4-6.3E.s390",
"3AS:samba-common-0:3.0.4-6.3E.s390x",
"3AS:samba-common-0:3.0.4-6.3E.x86_64",
"3AS:samba-swat-0:3.0.4-6.3E.i386",
"3AS:samba-swat-0:3.0.4-6.3E.ia64",
"3AS:samba-swat-0:3.0.4-6.3E.ppc",
"3AS:samba-swat-0:3.0.4-6.3E.s390",
"3AS:samba-swat-0:3.0.4-6.3E.s390x",
"3AS:samba-swat-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-0:3.0.4-6.3E.i386",
"3Desktop:samba-0:3.0.4-6.3E.src",
"3Desktop:samba-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-client-0:3.0.4-6.3E.i386",
"3Desktop:samba-client-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-common-0:3.0.4-6.3E.i386",
"3Desktop:samba-common-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-swat-0:3.0.4-6.3E.i386",
"3Desktop:samba-swat-0:3.0.4-6.3E.x86_64",
"3ES:samba-0:3.0.4-6.3E.i386",
"3ES:samba-0:3.0.4-6.3E.ia64",
"3ES:samba-0:3.0.4-6.3E.src",
"3ES:samba-0:3.0.4-6.3E.x86_64",
"3ES:samba-client-0:3.0.4-6.3E.i386",
"3ES:samba-client-0:3.0.4-6.3E.ia64",
"3ES:samba-client-0:3.0.4-6.3E.x86_64",
"3ES:samba-common-0:3.0.4-6.3E.i386",
"3ES:samba-common-0:3.0.4-6.3E.ia64",
"3ES:samba-common-0:3.0.4-6.3E.x86_64",
"3ES:samba-swat-0:3.0.4-6.3E.i386",
"3ES:samba-swat-0:3.0.4-6.3E.ia64",
"3ES:samba-swat-0:3.0.4-6.3E.x86_64",
"3WS:samba-0:3.0.4-6.3E.i386",
"3WS:samba-0:3.0.4-6.3E.ia64",
"3WS:samba-0:3.0.4-6.3E.src",
"3WS:samba-0:3.0.4-6.3E.x86_64",
"3WS:samba-client-0:3.0.4-6.3E.i386",
"3WS:samba-client-0:3.0.4-6.3E.ia64",
"3WS:samba-client-0:3.0.4-6.3E.x86_64",
"3WS:samba-common-0:3.0.4-6.3E.i386",
"3WS:samba-common-0:3.0.4-6.3E.ia64",
"3WS:samba-common-0:3.0.4-6.3E.x86_64",
"3WS:samba-swat-0:3.0.4-6.3E.i386",
"3WS:samba-swat-0:3.0.4-6.3E.ia64",
"3WS:samba-swat-0:3.0.4-6.3E.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0600"
},
{
"category": "external",
"summary": "RHBZ#1617238",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617238"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0600",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0600"
}
],
"release_date": "2004-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2004-07-22T11:02:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/",
"product_ids": [
"3AS:samba-0:3.0.4-6.3E.i386",
"3AS:samba-0:3.0.4-6.3E.ia64",
"3AS:samba-0:3.0.4-6.3E.ppc",
"3AS:samba-0:3.0.4-6.3E.ppc64",
"3AS:samba-0:3.0.4-6.3E.s390",
"3AS:samba-0:3.0.4-6.3E.s390x",
"3AS:samba-0:3.0.4-6.3E.src",
"3AS:samba-0:3.0.4-6.3E.x86_64",
"3AS:samba-client-0:3.0.4-6.3E.i386",
"3AS:samba-client-0:3.0.4-6.3E.ia64",
"3AS:samba-client-0:3.0.4-6.3E.ppc",
"3AS:samba-client-0:3.0.4-6.3E.s390",
"3AS:samba-client-0:3.0.4-6.3E.s390x",
"3AS:samba-client-0:3.0.4-6.3E.x86_64",
"3AS:samba-common-0:3.0.4-6.3E.i386",
"3AS:samba-common-0:3.0.4-6.3E.ia64",
"3AS:samba-common-0:3.0.4-6.3E.ppc",
"3AS:samba-common-0:3.0.4-6.3E.s390",
"3AS:samba-common-0:3.0.4-6.3E.s390x",
"3AS:samba-common-0:3.0.4-6.3E.x86_64",
"3AS:samba-swat-0:3.0.4-6.3E.i386",
"3AS:samba-swat-0:3.0.4-6.3E.ia64",
"3AS:samba-swat-0:3.0.4-6.3E.ppc",
"3AS:samba-swat-0:3.0.4-6.3E.s390",
"3AS:samba-swat-0:3.0.4-6.3E.s390x",
"3AS:samba-swat-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-0:3.0.4-6.3E.i386",
"3Desktop:samba-0:3.0.4-6.3E.src",
"3Desktop:samba-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-client-0:3.0.4-6.3E.i386",
"3Desktop:samba-client-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-common-0:3.0.4-6.3E.i386",
"3Desktop:samba-common-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-swat-0:3.0.4-6.3E.i386",
"3Desktop:samba-swat-0:3.0.4-6.3E.x86_64",
"3ES:samba-0:3.0.4-6.3E.i386",
"3ES:samba-0:3.0.4-6.3E.ia64",
"3ES:samba-0:3.0.4-6.3E.src",
"3ES:samba-0:3.0.4-6.3E.x86_64",
"3ES:samba-client-0:3.0.4-6.3E.i386",
"3ES:samba-client-0:3.0.4-6.3E.ia64",
"3ES:samba-client-0:3.0.4-6.3E.x86_64",
"3ES:samba-common-0:3.0.4-6.3E.i386",
"3ES:samba-common-0:3.0.4-6.3E.ia64",
"3ES:samba-common-0:3.0.4-6.3E.x86_64",
"3ES:samba-swat-0:3.0.4-6.3E.i386",
"3ES:samba-swat-0:3.0.4-6.3E.ia64",
"3ES:samba-swat-0:3.0.4-6.3E.x86_64",
"3WS:samba-0:3.0.4-6.3E.i386",
"3WS:samba-0:3.0.4-6.3E.ia64",
"3WS:samba-0:3.0.4-6.3E.src",
"3WS:samba-0:3.0.4-6.3E.x86_64",
"3WS:samba-client-0:3.0.4-6.3E.i386",
"3WS:samba-client-0:3.0.4-6.3E.ia64",
"3WS:samba-client-0:3.0.4-6.3E.x86_64",
"3WS:samba-common-0:3.0.4-6.3E.i386",
"3WS:samba-common-0:3.0.4-6.3E.ia64",
"3WS:samba-common-0:3.0.4-6.3E.x86_64",
"3WS:samba-swat-0:3.0.4-6.3E.i386",
"3WS:samba-swat-0:3.0.4-6.3E.ia64",
"3WS:samba-swat-0:3.0.4-6.3E.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2004:259"
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "security flaw"
},
{
"cve": "CVE-2004-0686",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617250"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"3AS:samba-0:3.0.4-6.3E.i386",
"3AS:samba-0:3.0.4-6.3E.ia64",
"3AS:samba-0:3.0.4-6.3E.ppc",
"3AS:samba-0:3.0.4-6.3E.ppc64",
"3AS:samba-0:3.0.4-6.3E.s390",
"3AS:samba-0:3.0.4-6.3E.s390x",
"3AS:samba-0:3.0.4-6.3E.src",
"3AS:samba-0:3.0.4-6.3E.x86_64",
"3AS:samba-client-0:3.0.4-6.3E.i386",
"3AS:samba-client-0:3.0.4-6.3E.ia64",
"3AS:samba-client-0:3.0.4-6.3E.ppc",
"3AS:samba-client-0:3.0.4-6.3E.s390",
"3AS:samba-client-0:3.0.4-6.3E.s390x",
"3AS:samba-client-0:3.0.4-6.3E.x86_64",
"3AS:samba-common-0:3.0.4-6.3E.i386",
"3AS:samba-common-0:3.0.4-6.3E.ia64",
"3AS:samba-common-0:3.0.4-6.3E.ppc",
"3AS:samba-common-0:3.0.4-6.3E.s390",
"3AS:samba-common-0:3.0.4-6.3E.s390x",
"3AS:samba-common-0:3.0.4-6.3E.x86_64",
"3AS:samba-swat-0:3.0.4-6.3E.i386",
"3AS:samba-swat-0:3.0.4-6.3E.ia64",
"3AS:samba-swat-0:3.0.4-6.3E.ppc",
"3AS:samba-swat-0:3.0.4-6.3E.s390",
"3AS:samba-swat-0:3.0.4-6.3E.s390x",
"3AS:samba-swat-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-0:3.0.4-6.3E.i386",
"3Desktop:samba-0:3.0.4-6.3E.src",
"3Desktop:samba-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-client-0:3.0.4-6.3E.i386",
"3Desktop:samba-client-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-common-0:3.0.4-6.3E.i386",
"3Desktop:samba-common-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-swat-0:3.0.4-6.3E.i386",
"3Desktop:samba-swat-0:3.0.4-6.3E.x86_64",
"3ES:samba-0:3.0.4-6.3E.i386",
"3ES:samba-0:3.0.4-6.3E.ia64",
"3ES:samba-0:3.0.4-6.3E.src",
"3ES:samba-0:3.0.4-6.3E.x86_64",
"3ES:samba-client-0:3.0.4-6.3E.i386",
"3ES:samba-client-0:3.0.4-6.3E.ia64",
"3ES:samba-client-0:3.0.4-6.3E.x86_64",
"3ES:samba-common-0:3.0.4-6.3E.i386",
"3ES:samba-common-0:3.0.4-6.3E.ia64",
"3ES:samba-common-0:3.0.4-6.3E.x86_64",
"3ES:samba-swat-0:3.0.4-6.3E.i386",
"3ES:samba-swat-0:3.0.4-6.3E.ia64",
"3ES:samba-swat-0:3.0.4-6.3E.x86_64",
"3WS:samba-0:3.0.4-6.3E.i386",
"3WS:samba-0:3.0.4-6.3E.ia64",
"3WS:samba-0:3.0.4-6.3E.src",
"3WS:samba-0:3.0.4-6.3E.x86_64",
"3WS:samba-client-0:3.0.4-6.3E.i386",
"3WS:samba-client-0:3.0.4-6.3E.ia64",
"3WS:samba-client-0:3.0.4-6.3E.x86_64",
"3WS:samba-common-0:3.0.4-6.3E.i386",
"3WS:samba-common-0:3.0.4-6.3E.ia64",
"3WS:samba-common-0:3.0.4-6.3E.x86_64",
"3WS:samba-swat-0:3.0.4-6.3E.i386",
"3WS:samba-swat-0:3.0.4-6.3E.ia64",
"3WS:samba-swat-0:3.0.4-6.3E.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0686"
},
{
"category": "external",
"summary": "RHBZ#1617250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0686",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0686"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0686",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0686"
}
],
"release_date": "2004-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2004-07-22T11:02:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/",
"product_ids": [
"3AS:samba-0:3.0.4-6.3E.i386",
"3AS:samba-0:3.0.4-6.3E.ia64",
"3AS:samba-0:3.0.4-6.3E.ppc",
"3AS:samba-0:3.0.4-6.3E.ppc64",
"3AS:samba-0:3.0.4-6.3E.s390",
"3AS:samba-0:3.0.4-6.3E.s390x",
"3AS:samba-0:3.0.4-6.3E.src",
"3AS:samba-0:3.0.4-6.3E.x86_64",
"3AS:samba-client-0:3.0.4-6.3E.i386",
"3AS:samba-client-0:3.0.4-6.3E.ia64",
"3AS:samba-client-0:3.0.4-6.3E.ppc",
"3AS:samba-client-0:3.0.4-6.3E.s390",
"3AS:samba-client-0:3.0.4-6.3E.s390x",
"3AS:samba-client-0:3.0.4-6.3E.x86_64",
"3AS:samba-common-0:3.0.4-6.3E.i386",
"3AS:samba-common-0:3.0.4-6.3E.ia64",
"3AS:samba-common-0:3.0.4-6.3E.ppc",
"3AS:samba-common-0:3.0.4-6.3E.s390",
"3AS:samba-common-0:3.0.4-6.3E.s390x",
"3AS:samba-common-0:3.0.4-6.3E.x86_64",
"3AS:samba-swat-0:3.0.4-6.3E.i386",
"3AS:samba-swat-0:3.0.4-6.3E.ia64",
"3AS:samba-swat-0:3.0.4-6.3E.ppc",
"3AS:samba-swat-0:3.0.4-6.3E.s390",
"3AS:samba-swat-0:3.0.4-6.3E.s390x",
"3AS:samba-swat-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-0:3.0.4-6.3E.i386",
"3Desktop:samba-0:3.0.4-6.3E.src",
"3Desktop:samba-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-client-0:3.0.4-6.3E.i386",
"3Desktop:samba-client-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-common-0:3.0.4-6.3E.i386",
"3Desktop:samba-common-0:3.0.4-6.3E.x86_64",
"3Desktop:samba-swat-0:3.0.4-6.3E.i386",
"3Desktop:samba-swat-0:3.0.4-6.3E.x86_64",
"3ES:samba-0:3.0.4-6.3E.i386",
"3ES:samba-0:3.0.4-6.3E.ia64",
"3ES:samba-0:3.0.4-6.3E.src",
"3ES:samba-0:3.0.4-6.3E.x86_64",
"3ES:samba-client-0:3.0.4-6.3E.i386",
"3ES:samba-client-0:3.0.4-6.3E.ia64",
"3ES:samba-client-0:3.0.4-6.3E.x86_64",
"3ES:samba-common-0:3.0.4-6.3E.i386",
"3ES:samba-common-0:3.0.4-6.3E.ia64",
"3ES:samba-common-0:3.0.4-6.3E.x86_64",
"3ES:samba-swat-0:3.0.4-6.3E.i386",
"3ES:samba-swat-0:3.0.4-6.3E.ia64",
"3ES:samba-swat-0:3.0.4-6.3E.x86_64",
"3WS:samba-0:3.0.4-6.3E.i386",
"3WS:samba-0:3.0.4-6.3E.ia64",
"3WS:samba-0:3.0.4-6.3E.src",
"3WS:samba-0:3.0.4-6.3E.x86_64",
"3WS:samba-client-0:3.0.4-6.3E.i386",
"3WS:samba-client-0:3.0.4-6.3E.ia64",
"3WS:samba-client-0:3.0.4-6.3E.x86_64",
"3WS:samba-common-0:3.0.4-6.3E.i386",
"3WS:samba-common-0:3.0.4-6.3E.ia64",
"3WS:samba-common-0:3.0.4-6.3E.x86_64",
"3WS:samba-swat-0:3.0.4-6.3E.i386",
"3WS:samba-swat-0:3.0.4-6.3E.ia64",
"3WS:samba-swat-0:3.0.4-6.3E.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2004:259"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
RHSA-2004:404
Vulnerability from csaf_redhat - Published: 2004-07-26 07:43 - Updated: 2025-11-21 17:27Summary
Red Hat Security Advisory: samba security update
Severity
Moderate
Notes
Topic: Updated samba packages that fix a buffer overflow issue are now available.
Details: Samba provides file and printer sharing services to SMB/CIFS clients.
The Samba team discovered a buffer overflow in the code used to support
the 'mangling method = hash' smb.conf option. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0686
to this issue.
All users of Samba should upgrade to these updated packages, which
contain an upgrade to Samba-2.2.10, which is not vulnerable to this
issue.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::as
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux ES version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::es
|
— |
Vendor Fix
fix
|
|
Red Hat Enterprise Linux WS version 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::ws
|
— |
Vendor Fix
fix
|
|
Red Hat Linux Advanced Workstation 2.1
Red Hat / Red Hat Enterprise Linux
|
cpe:/o:redhat:enterprise_linux:2.1::aw
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated samba packages that fix a buffer overflow issue are now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Samba provides file and printer sharing services to SMB/CIFS clients. \n \nThe Samba team discovered a buffer overflow in the code used to support \nthe \u0027mangling method = hash\u0027 smb.conf option. The Common Vulnerabilities \nand Exposures project (cve.mitre.org) has assigned the name CAN-2004-0686 \nto this issue. \n \nAll users of Samba should upgrade to these updated packages, which \ncontain an upgrade to Samba-2.2.10, which is not vulnerable to this \nissue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2004:404",
"url": "https://access.redhat.com/errata/RHSA-2004:404"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "128227",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=128227"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_404.json"
}
],
"title": "Red Hat Security Advisory: samba security update",
"tracking": {
"current_release_date": "2025-11-21T17:27:35+00:00",
"generator": {
"date": "2025-11-21T17:27:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2004:404",
"initial_release_date": "2004-07-26T07:43:00+00:00",
"revision_history": [
{
"date": "2004-07-26T07:43:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2004-07-26T00:00:00+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:27:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product": {
"name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
}
}
},
{
"category": "product_name",
"name": "Red Hat Linux Advanced Workstation 2.1",
"product": {
"name": "Red Hat Linux Advanced Workstation 2.1",
"product_id": "Red Hat Linux Advanced Workstation 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ES version 2.1",
"product": {
"name": "Red Hat Enterprise Linux ES version 2.1",
"product_id": "Red Hat Enterprise Linux ES version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux WS version 2.1",
"product": {
"name": "Red Hat Enterprise Linux WS version 2.1",
"product_id": "Red Hat Enterprise Linux WS version 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2004-0686",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1617250"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "security flaw",
"title": "Vulnerability summary"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1",
"Red Hat Linux Advanced Workstation 2.1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2004-0686"
},
{
"category": "external",
"summary": "RHBZ#1617250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2004-0686",
"url": "https://www.cve.org/CVERecord?id=CVE-2004-0686"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0686",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0686"
}
],
"release_date": "2004-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2004-07-26T07:43:00+00:00",
"details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/",
"product_ids": [
"Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
"Red Hat Enterprise Linux ES version 2.1",
"Red Hat Enterprise Linux WS version 2.1",
"Red Hat Linux Advanced Workstation 2.1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2004:404"
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "security flaw"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…