CVEvulnerability

CVE-2004-0949

6.4 MEDIUM Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

Affected configurations

• linux linux kernel 2.4.0 • linux linux kernel 2.4.1 • linux linux kernel 2.4.2 • linux linux kernel 2.4.3 • linux linux kernel 2.4.4 • linux linux kernel 2.4.5 • linux linux kernel 2.4.6 • linux linux kernel 2.4.7 • linux linux kernel 2.4.8 • linux linux kernel 2.4.9 • linux linux kernel 2.4.10 • linux linux kernel 2.4.11 • linux linux kernel 2.4.12 • linux linux kernel 2.4.13 • linux linux kernel 2.4.14 • linux linux kernel 2.4.15 • linux linux kernel 2.4.16 • linux linux kernel 2.4.17 • linux linux kernel 2.4.18 • linux linux kernel 2.4.19 • linux linux kernel 2.4.20 • linux linux kernel 2.4.21 • linux linux kernel 2.4.22 • linux linux kernel 2.4.23 • linux linux kernel 2.4.23 ow2 • linux linux kernel 2.4.24 • linux linux kernel 2.4.24 ow1 • linux linux kernel 2.4.25 • linux linux kernel 2.4.26 • linux linux kernel 2.4.27 • linux linux kernel 2.6.0 • linux linux kernel 2.6.1 • linux linux kernel 2.6.2 • linux linux kernel 2.6.3 • linux linux kernel 2.6.4 • linux linux kernel 2.6.5 • linux linux kernel 2.6.6 • linux linux kernel 2.6.7 • linux linux kernel 2.6.8 • linux linux kernel 2.6.9 • linux linux kernel 2.6 test9 cvs • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat fedora core core 2.0 • redhat fedora core core 3.0 • redhat linux advanced workstation 2.1 • suse suse linux 1.0 • suse suse linux 8 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • trustix secure linux 1.5 • trustix secure linux 2.0 • trustix secure linux 2.1 • trustix secure linux 2.2 • ubuntu ubuntu linux 4.1

References