CVE-2004-0808

The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873Patch
• http://marc.info/?l=bugtraq&m=109509335230495&w=2
• http://marc.info/?l=bugtraq&m=109526231623307&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200409-16.xmlPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=138&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092
• http://www.redhat.com/support/errata/RHSA-2004-467.htmlPatch, Vendor Advisory
• http://www.trustix.net/errata/2004/0046/Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873Patch
• http://marc.info/?l=bugtraq&m=109509335230495&w=2
• http://marc.info/?l=bugtraq&m=109526231623307&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200409-16.xmlPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=138&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092
• http://www.redhat.com/support/errata/RHSA-2004-467.htmlPatch, Vendor Advisory
• http://www.trustix.net/errata/2004/0046/Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0802Buffer overflow in the BMP loader in imlib2 before 1.1.2 all…
• CVE-2004-0803Multiple vulnerabilities in the RLE (run length encoding) de…
• CVE-2004-0804Vulnerability in tif_dirread.c for libtiff allows remote att…
• CVE-2004-0805Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg…
• CVE-2004-0806cdrecord in the cdrtools package before 2.01, when installed…
• CVE-2004-0807Samba 3.0.6 and earlier allows remote attackers to cause a d…
• CVE-2004-0809The mod_dav module in Apache 2.0.50 and earlier allows remot…
• CVE-2004-0810Buffer overflow in Netopia Timbuktu 7.0.3 allows remote atta…
• CVE-2004-0811Unknown vulnerability in Apache 2.0.51 prevents "the merging…
• CVE-2004-0812Unknown vulnerability in the Linux kernel before 2.4.23, on …
• CVE-2004-0813Unknown vulnerability in the SG_IO functionality in ide-cd a…
• CVE-2004-0814Multiple race conditions in the terminal layer in Linux 2.4.…