CVE-2004-0930
CVE-2004-0930 is a medium-severity vulnerability in Samba with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 5% (91st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Samba
- Published:
- Last modified:
Description
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
Frequently asked questions
- What is CVE-2004-0930?
- The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
- How severe is CVE-2004-0930?
- CVE-2004-0930 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2004-0930 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (91st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2004-0930?
- CVE-2004-0930 primarily affects Samba. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2004-0930?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2004-0930 published?
- CVE-2004-0930 was published on 2005-01-27 and last updated on 2026-06-16.
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt
- ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
- http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
- http://marc.info/?l=bugtraq&m=109993720717957&w=2
- http://marc.info/?l=bugtraq&m=110330519803655&w=2
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101783-1
- http://www.gentoo.org/security/en/glsa/glsa-200411-21.xml
- http://www.idefense.com/application/poi/display?id=156&type=vulnerabilities&flashstatus=false
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:131
- http://www.novell.com/linux/security/advisories/2004_40_samba.html
- http://www.securityfocus.com/bid/11624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17987
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10936
- https://www.ubuntu.com/usn/usn-22-1/
Affected products (30)
- cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.1:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.2:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.3:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.4:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.5:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.6:*:irix:*:*:*:*:*
- cpe:2.3:a:sgi:samba:3.0.7:*:irix:*:*:*:*:*
- cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*
More vulnerabilities in Samba
- CVE-2015-0240 — Critical (CVSS 10.0): The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before…
- CVE-2012-1182 — Critical (CVSS 10.0): The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement…
- CVE-2007-2446 — Critical (CVSS 10.0): Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers…
- CVE-2004-0882 — Critical (CVSS 10.0): Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute…
- CVE-2004-1154 — Critical (CVSS 10.0): Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to…
- CVE-2004-0600 — Critical (CVSS 10.0): Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute…