NVD

Id
70550  
Name
CVE-2004-0082  
Description
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-03-03  
Modified Date
2008-09-05  
Seq
2004-0082  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363652 70550 CVE-2004-0082 oval:org.mitre.oval:def:827  View
363653 70550 CVE-2004-0082 http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt  View
363654 70550 CVE-2004-0082 O-078  View
363655 70550 CVE-2004-0082 RHSA-2004:064  View
363656 70550 CVE-2004-0082 9637  View
363657 70550 CVE-2004-0082 http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html  View
363658 70550 CVE-2004-0082 samba-mksmbpasswd-gain-access(15132)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62735 JVNDB-2004-000076 Samba の mksmbpasswd.sh におけるパスワードが推測される脆弱性 Samba に含まれる mksmbpasswd.sh にはパスワードの初期化処理が不適切であり、パスワードを特定の値で上書きしてしまうため、パスワードを推測可能な脆弱性が存在します。 CVE-2004-0082 8509 CVE-2004-0082 70550 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000076.html 2004-03-10 2007-04-01 View