Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*

part: a version: 2.2.8a update: *

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.824946
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.824947
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.824949

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2724 vulnerable 2026-06-08 04:58:08.771136 Details available
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
Published: 2011-09-06T16:00:00.000Z
Updated: 2024-08-06T23:08:23.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0547 vulnerable 2026-06-08 04:52:03.127745 Details available
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Published: 2010-02-04T18:00:00.000Z
Updated: 2024-08-07T00:52:19.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6015 vulnerable 2026-06-08 04:50:07.485382 Details available
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Published: 2007-12-13T21:00:00.000Z
Updated: 2024-08-07T15:54:25.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2546 vulnerable 2026-06-08 04:48:10.106958 Details available
Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
Published: 2005-11-21T11:00:00.000Z
Updated: 2024-08-08T01:29:14.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1154 vulnerable 2026-06-08 04:47:53.121711 Details available
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:39:00.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0829 vulnerable 2026-06-08 04:47:51.576269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0815 vulnerable 2026-06-08 04:47:51.417784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.