Buffer Overflow in Samba 3.0.x-3.0.7 allows Remote Code Execution

CVE-2004-0882

What is CVE-2004-0882?

The vulnerability in the Samba software affects versions 3.0.0 through 3.0.7, introducing a buffer overflow in the QFILEPATHINFO request handler. By sending carefully crafted TRANSACT2_QFILEPATHINFO requests with a small maximum data bytes value, an attacker could exploit this flaw to execute arbitrary code on the affected systems, potentially leading to unauthorized access and control over sensitive data.

References