CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

• CWE-665

• http://advisories.mageia.org/MGASA-2014-0279.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/59378Third Party Advisory
• http://secunia.com/advisories/59407Third Party Advisory
• http://secunia.com/advisories/59579Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201502-15.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:136Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:082Broken Link
• http://www.samba.org/samba/security/CVE-2014-0178Vendor Advisory
• http://www.securityfocus.com/archive/1/532757/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/67686Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030308Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993Third Party Advisory
• http://advisories.mageia.org/MGASA-2014-0279.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/59378Third Party Advisory
• http://secunia.com/advisories/59407Third Party Advisory
• http://secunia.com/advisories/59579Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201502-15.xmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:136Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:082Broken Link
• http://www.samba.org/samba/security/CVE-2014-0178Vendor Advisory
• http://www.securityfocus.com/archive/1/532757/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/67686Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030308Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993Third Party Advisory

Published

May 28, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0172Integer overflow in the check_section function in dwarf_begi…
• CVE-2014-0173The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0…
• CVE-2014-0174Cumin (aka MRG Management Console), as used in Red Hat Enter…
• CVE-2014-0175mcollective has a default password set at install9.8
• CVE-2014-0176Cross-site scripting (XSS) vulnerability in application/pane…
• CVE-2014-0177The am function in lib/hub/commands.rb in hub before 1.12.1 …
• CVE-2014-0179libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users …
• CVE-2014-0180The wait_for_task function in app/controllers/application_co…
• CVE-2014-0181The Netlink implementation in the Linux kernel through 3.14.…
• CVE-2014-0182Heap-based buffer overflow in the virtio_load function in hw…
• CVE-2014-0183Versions of Katello as shipped with Red Hat Subscription Ass…6.1
• CVE-2014-0184Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4…