{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-02-18T00:00:00", "descriptions": [{"lang": "en", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-07-17T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "9637", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "tags": ["third-party-advisory", "government-resource", "x_refsource_CIAC"], "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/3919"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2004-0082", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "9637", "refsource": "BID", "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "refsource": "CIAC", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"name": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html", "refsource": "CONFIRM", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"name": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt", "refsource": "CONFIRM", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "refsource": "OSVDB", "url": "http://www.osvdb.org/3919"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T00:01:23.636Z"}, "title": "CVE Program Container", "references": [{"name": "9637", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "tags": ["third-party-advisory", "government-resource", "x_refsource_CIAC", "x_transferred"], "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/3919"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-0082", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2004-01-19T00:00:00", "dateUpdated": "2024-08-08T00:01:23.636Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919", "vulnerable": true}, {"criteria": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "216145B7-4716-42F7-90DC-03884ECB2271", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}, {"lang": "es", "value": "mksmbpasswd en Samba 3.0.0 y 3.0.1, cuando se crea una cuenta pero se marca como desactivada, puede sobreescribir la contrase\u00f1a de usaurio con un b\u00fafer sin inicializar, lo que podr\u00eda activar la cuenta con una contrase\u00f1a m\u00e1s facil de adivinar."}], "id": "CVE-2004-0082", "lastModified": "2024-11-20T23:47:43.593", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-03-03T05:00:00.000", "references": [{"source": "[email protected]", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"source": "[email protected]", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"source": "[email protected]", "url": "http://www.osvdb.org/3919"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9637"}, {"source": "[email protected]", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"source": "[email protected]", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/3919"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9637"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank the Samba team for reporting this issue.", "affected_release": [{"advisory": "RHSA-2004:064", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "samba-0:3.0.2-6.3E", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2004-02-18T00:00:00Z"}], "bugzilla": {"description": "security flaw", "id": "1617143", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617143"}, "csaw": false, "details": ["The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."], "name": "CVE-2004-0082", "public_date": "2004-02-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2004-0082\nhttps://nvd.nist.gov/vuln/detail/CVE-2004-0082"], "threat_severity": "Low"}