Approved changes feed: RSS · Atom
cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:*
part: a version: 3.4 update: *
| Vendor | Samba (e90b9146-231c-5d4c-abab-30ee379c95a2) |
|---|---|
| Product | Samba (19c5014a-3c29-57af-83eb-c04c4b75a29f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/samba-team/samba |
purl2cpe | 2026-06-01 10:11:05.883470 |
pkg:gitlab/samba-team/samba |
purl2cpe | 2026-06-01 10:11:05.883472 |
pkg:samba/samba |
purl2cpe | 2026-06-01 10:11:05.883473 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1642 |
vulnerable | 2026-06-08 04:54:09.575848 |
Details available
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:42.967Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1635 |
vulnerable | 2026-06-08 04:54:09.522258 |
Details available
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:43.269Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2813 |
vulnerable | 2026-06-08 04:51:30.570125 |
Details available
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Published: 2009-09-14T16:00:00.000Z
Updated: 2024-08-07T06:07:36.127Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.