GCVE - cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*

part: a version: 2.2.5 update: *

Vendor	Samba (`e90b9146-231c-5d4c-abab-30ee379c95a2`)
Product	Samba (`19c5014a-3c29-57af-83eb-c04c4b75a29f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/samba-team/samba`	purl2cpe	2026-06-01 10:11:05.824909
`pkg:gitlab/samba-team/samba`	purl2cpe	2026-06-01 10:11:05.824911
`pkg:samba/samba`	purl2cpe	2026-06-01 10:11:05.824912

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2724`	vulnerable	2026-06-08 04:58:08.767222	Details available The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547. Published: 2011-09-06T16:00:00.000Z Updated: 2024-08-06T23:08:23.760Z Open on db.gcve.eu Reference links http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91 http://www.redhat.com/support/errata/RHSA-2011-1220.html https://bugzilla.redhat.com/show_bug.cgi?id=726691 http://secunia.com/advisories/45798 http://www.securitytracker.com/id?1025984	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0547`	vulnerable	2026-06-08 04:52:03.125259	Details available client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. Published: 2010-02-04T18:00:00.000Z Updated: 2024-08-07T00:52:19.691Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1062 http://secunia.com/advisories/39317 http://security.gentoo.org/glsa/glsa-201206-29.xml http://www.securityfocus.com/bid/38326 http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a065c177dfc8f968775593ba00dffafeebb2e054	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6015`	vulnerable	2026-06-08 04:50:07.482936	Details available Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request. Published: 2007-12-13T21:00:00.000Z Updated: 2024-08-07T15:54:25.651Z Open on db.gcve.eu Reference links http://www.redhat.com/support/errata/RHSA-2007-1117.html http://docs.info.apple.com/article.html?artnum=307430 http://lists.vmware.com/pipermail/security-announce/2008/000005.html http://secunia.com/advisories/28891 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1154`	vulnerable	2026-06-08 04:47:53.121627	Details available Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:39:00.944Z Open on db.gcve.eu Reference links http://www.samba.org/samba/security/CAN-2004-1154.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-101643-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10236 http://www.securityfocus.com/bid/11973 https://exchange.xforce.ibmcloud.com/vulnerabilities/18519	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0829`	vulnerable	2026-06-08 04:47:51.576184	Details available smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2. Published: 2004-09-10T04:00:00.000Z Updated: 2024-08-08T00:31:47.846Z Open on db.gcve.eu Reference links http://seclists.org/lists/bugtraq/2004/Sep/0003.html http://www.trustix.org/errata/2004/0043 https://exchange.xforce.ibmcloud.com/vulnerabilities/17138 http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml http://samba.org/samba/history/samba-2.2.11.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0815`	vulnerable	2026-06-08 04:47:51.415342	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0201`	vulnerable	2026-06-08 04:47:20.988246	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0196`	vulnerable	2026-06-08 04:47:20.973634	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0086`	vulnerable	2026-06-08 04:47:20.478449	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0085`	vulnerable	2026-06-08 04:47:20.472400	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1318`	vulnerable	2026-06-08 04:46:23.403365	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.