Skip to content
OpenAdvisories
Unscored RHSA-2004:632 2 CVEs

Red Hat Security Advisory: samba security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as samba 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::as samba-client 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::as samba-common 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::as samba-debuginfo 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::as samba-swat 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::desktop samba 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-client 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-common 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-debuginfo 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::desktop samba-swat 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::es samba 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::es samba-client 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::es samba-common 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::es samba-debuginfo 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::es samba-swat 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::ws samba 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::ws samba-client 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::ws samba-common 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::ws samba-debuginfo 0:3.0.7-1.3E.1
Red Hat · RHEL 3 enterprise_linux:3::ws samba-swat 0:3.0.7-1.3E.1

Vulnerabilities 2

  • Unscored —
    CVE-2004-0882 EPSS 14%

    Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute…

  • Unscored —

    The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.samba.org/samba/history/samba-3.0.9.html
  • article
    http://www.redhat.com/f/pdf/rhel/WHP0006US_Execshield.pdf
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=134640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=138325
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_632.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0882
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617311
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0882
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0882
  • report
    https://access.redhat.com/security/cve/CVE-2004-0930
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0930
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0930