Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:2.0.9:*:*:*:*:*:*:*

part: a version: 2.0.9 update: *

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.824834
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.824835
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.824837

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2724 vulnerable 2026-06-08 04:58:08.759415 Details available
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
Published: 2011-09-06T16:00:00.000Z
Updated: 2024-08-06T23:08:23.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6015 vulnerable 2026-06-08 04:50:07.478543 Details available
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Published: 2007-12-13T21:00:00.000Z
Updated: 2024-08-07T15:54:25.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1154 vulnerable 2026-06-08 04:47:53.120941 Details available
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0201 vulnerable 2026-06-08 04:47:20.988127 Details available
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Published: 2003-04-15T04:00:00.000Z
Updated: 2024-08-08T01:43:36.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0196 vulnerable 2026-06-08 04:47:20.973484 Details available
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Published: 2003-04-15T04:00:00.000Z
Updated: 2024-08-08T01:43:36.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0086 vulnerable 2026-06-08 04:47:20.478299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0085 vulnerable 2026-06-08 04:47:20.467958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1162 vulnerable 2026-06-08 04:45:21.544268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.