CVE-2008-1105

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/secunia_research/2008-20/advisory/", "name": "http://secunia.com/secunia_research/2008-20/advisory/", "tags": ["Third Party Advisory", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.samba.org/samba/security/CVE-2008-1105.html", "name": "http://www.samba.org/samba/security/CVE-2008-1105.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/29404", "name": "29404", "tags": ["Patch", "Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1020123", "name": "1020123", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/30228", "name": "30228", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/30385", "name": "30385", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html", "name": "SUSE-SA:2008:026", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "SUSE"}, {"url": "http://secunia.com/advisories/30543", "name": "30543", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/30489", "name": "30489", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/30736", "name": "30736", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://support.apple.com/kb/HT2163", "name": "http://support.apple.com/kb/HT2163", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/31246", "name": "31246", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.vmware.com/pipermail/security-announce/2008/000023.html", "name": "[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657", "name": "HPSBUX02341", "tags": ["Broken Link"], "refsource": "HP"}, {"url": "http://www.ubuntu.com/usn/usn-617-2", "name": "USN-617-2", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://secunia.com/advisories/30835", "name": "30835", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/30802", "name": "30802", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html", "name": "APPLE-SA-2008-06-30", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "APPLE"}, {"url": "http://www.ubuntu.com/usn/usn-617-1", "name": "USN-617-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf", "name": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/31911", "name": "31911", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/31255", "name": "31255", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/30396", "name": "30396", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1", "name": "249086", "tags": ["Broken Link"], "refsource": "SUNALERT"}, {"url": "http://secunia.com/advisories/33696", "name": "33696", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/30478", "name": "30478", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html", "name": "FEDORA-2008-4679", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html", "name": "FEDORA-2008-4797", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://secunia.com/advisories/30449", "name": "30449", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2008/dsa-1590", "name": "DSA-1590", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://wiki.rpath.com/Advisories:rPSA-2008-0180", "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0180", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html", "name": "FEDORA-2008-4724", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951", "name": "SSA:2008-149-01", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "SLACKWARE"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0289.html", "name": "RHSA-2008:0289", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0290.html", "name": "RHSA-2008:0290", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:108", "name": "MDVSA-2008:108", "tags": ["Broken Link"], "refsource": "MANDRIVA"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0288.html", "name": "RHSA-2008:0288", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/30442", "name": "30442", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://security.gentoo.org/glsa/glsa-200805-23.xml", "name": "GLSA-200805-23", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://www.vupen.com/english/advisories/2008/2222/references", "name": "ADV-2008-2222", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/1981/references", "name": "ADV-2008-1981", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/1908", "name": "ADV-2008-1908", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/2639", "name": "ADV-2008-2639", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/1681", "name": "ADV-2008-1681", "tags": ["Permissions Required"], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45251", "name": "xerox-controller-samba-code-execution(45251)", "tags": ["VDB Entry"], "refsource": "XF"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42664", "name": "samba-receivesmbraw-bo(42664)", "tags": ["VDB Entry"], "refsource": "XF"}, {"url": "https://www.exploit-db.com/exploits/5712", "name": "5712", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "EXPLOIT-DB"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733", "name": "oval:org.mitre.oval:def:5733", "tags": ["Third Party Advisory"], "refsource": "OVAL"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020", "name": "oval:org.mitre.oval:def:10020", "tags": ["Third Party Advisory"], "refsource": "OVAL"}, {"url": "http://www.securityfocus.com/archive/1/492903/100/0/threaded", "name": "20080602 rPSA-2008-0180-1 samba samba-client samba-server samba-swat", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/492737/100/0/threaded", "name": "20080529 Secunia Research: Samba \"receive_smb_raw()\" Buffer OverflowVulnerability", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/492683/100/0/threaded", "name": "20080528 [SAMBA] CVE-2008-1105 - Boundary failure when parsing SMB responses", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-1105", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2008-05-29T16:32Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.0.29", "versionStartIncluding": "3.0.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-08-29T20:12Z"}