Vulnerability CVE-2004-0930 - CERT Civis.Net

Vulnerability Name:

CVE-2004-0930 (CCN-17987)

Assigned:

2004-11-08

Published:

2004-11-08

Updated:

2017-10-11

Summary:

The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: CCN
Type: SCO Security Advisory SCOSA-2005.17
UnixWare 7.1.4 : Samba multiple security issues

Source: SCO
Type: UNKNOWN
SCOSA-2005.17

Source: SGI
Type: UNKNOWN
20041201-01-P

Source: CCN
Type: BugTraq Mailing List, Mon Nov 08 2004 - 11:45:02 CST
[SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability in Samba 3.0.x <= 3.0.7

Source: MITRE
Type: CNA
CVE-2004-0930

Source: CONECTIVA
Type: UNKNOWN
CLA-2004:899

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2004:899
Fix for Samba's denial of service vulnerability

Source: APPLE
Type: UNKNOWN
APPLE-SA-2005-03-21

Source: BUGTRAQ
Type: UNKNOWN
20041108 [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability

Source: OPENPKG
Type: UNKNOWN
OpenPKG-SA-2004.054

Source: CCN
Type: RHSA-2004-632
samba security update

Source: SUNALERT
Type: UNKNOWN
101783

Source: CCN
Type: CIAC Information Bulletin P-038
Samba Vulnerabilities

Source: CCN
Type: GLSA-200411-21
Samba: Multiple vulnerabilities

Source: GENTOO
Type: UNKNOWN
GLSA 200411-21

Source: CCN
Type: iDEFENSE Security Advisory 11.08.04
Samba SMBD Remote Denial of Service Vulnerability

Source: IDEFENSE
Type: Exploit, Patch, Vendor Advisory
20041108 Samba SMBD Remote Denial of Service Vulnerability

Source: CCN
Type: Fedora Update Notification FEDORA-2004-459
samba-3.0.9-1.fc2 update

Source: CCN
Type: Fedora Update Notification FEDORA-2004-460
samba-3.0.9-1.fc3 update

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2004:131

Source: SUSE
Type: UNKNOWN
SUSE-SA:2004:040

Source: CCN
Type: OpenPKG-SA-2004.054
Samba

Source: BID
Type: Patch, Vendor Advisory
11624

Source: CCN
Type: BID-11624
Samba Remote Wild Card Denial Of Service Vulnerability

Source: CCN
Type: TLSA-2004-32
Two vulnerabilities discovered in Samba

Source: CCN
Type: USN-22-1
samba vulnerability

Source: XF
Type: UNKNOWN
samba-msfnmatch-dos(17987)

Source: XF
Type: UNKNOWN
samba-msfnmatch-dos(17987)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10936

Source: SUSE
Type: SUSE-SA:2004:040
samba: remote denial of service

Source: UBUNTU
Type: UNKNOWN
USN-22-1

Vulnerable Configuration:

Configuration 1:

cpe:/a:samba:samba:3.0.0:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.5:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.6:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.7:*:*:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.1:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.2:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.3:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.4:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.5:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.6:*:irix:*:*:*:*:*

OR cpe:/a:sgi:samba:3.0.7:*:irix:*:*:*:*:*

OR cpe:/o:conectiva:linux:10.0:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:samba:samba:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:samba:samba:3.0.7:*:*:*:*:*:*:*

AND

cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora_core:2:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:10:*:*:*:*:*:*:*

OR cpe:/a:openpkg:openpkg:2.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.2:*:*:*:*:*:*:*

OR cpe:/a:openpkg:openpkg:2.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora_core:3:*:*:*:*:*:*:*

OR cpe:/o:novell:linux_desktop:9:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1::x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20040930	V	CVE-2004-0930	2015-11-16
oval:org.mitre.oval:def:10936	V	The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.	2013-04-29
oval:com.redhat.rhsa:def:20040632	P	RHSA-2004:632: samba security update (Important)	2004-11-16