Skip to content
OpenAdvisories
Unscored RHSA-2004:259 2 CVEs

Red Hat Security Advisory: samba security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as samba 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::as samba-client 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::as samba-common 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::as samba-swat 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::desktop samba 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-client 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-common 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-swat 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::es samba 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::es samba-client 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::es samba-common 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::es samba-swat 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::ws samba 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::ws samba-client 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::ws samba-common 0:3.0.4-6.3E
Red Hat · RHEL 3 enterprise_linux:3::ws samba-swat 0:3.0.4-6.3E

Vulnerabilities 2

  • Unscored —
    CVE-2004-0600 Public exploit EPSS 29%

    Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute …

    samba Debian
  • Unscored —
    CVE-2004-0686

    Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb…

    samba Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=102715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=114436
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=116560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=117181
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=119211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=121356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=122527
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=122749
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=123271
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=125714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=126296
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=127909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=128227
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_259.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617238
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0600
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0600
  • report
    https://access.redhat.com/security/cve/CVE-2004-0686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617250
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0686
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0686