CVE-2004-0082

{"id": "CVE-2004-0082", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-03-03T05:00:00.000", "references": [{"url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt", "source": "cve@mitre.org"}, {"url": "http://www.ciac.org/ciac/bulletins/o-078.shtml", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/3919", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-064.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9637", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827", "source": "cve@mitre.org"}, {"url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ciac.org/ciac/bulletins/o-078.shtml", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/3919", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-064.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/9637", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}, {"lang": "es", "value": "mksmbpasswd en Samba 3.0.0 y 3.0.1, cuando se crea una cuenta pero se marca como desactivada, puede sobreescribir la contrase\u00f1a de usaurio con un b\u00fafer sin inicializar, lo que podr\u00eda activar la cuenta con una contrase\u00f1a m\u00e1s facil de adivinar."}], "lastModified": "2024-11-20T23:47:43.593", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919"}, {"criteria": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "216145B7-4716-42F7-90DC-03884ECB2271"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}