Remote Denial of Service Vulnerability in Samba Software
CVE-2004-0930

Currently unrated

Key Information:

Vendor

Samba

Vendor
CVE Published:
27 January 2005

What is CVE-2004-0930?

The ms_fnmatch function in specific versions of Samba, such as 3.0.4 and 3.0.7, enables remote authenticated users to initiate a denial of service attack. This is accomplished by sending a SAMBA request that includes multiple wildcard characters, leading to excessive CPU consumption which can disrupt server functionality. It is crucial for system administrators to apply necessary patches to mitigate this vulnerability and maintain system integrity.

References

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.