Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:*

part: a version: 3.3 update: *

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.876212
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.876214
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.876216

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1642 vulnerable 2026-06-08 04:54:09.575572 Details available
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:42.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1635 vulnerable 2026-06-08 04:54:09.519998 Details available
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:43.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2813 vulnerable 2026-06-08 04:51:30.565726 Details available
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Published: 2009-09-14T16:00:00.000Z
Updated: 2024-08-07T06:07:36.127Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.