Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:*

part: a version: 3.1.0 update: *

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.861768
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.861769
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.861771

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4408 vulnerable 2026-06-08 05:04:36.023370 Details available
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
Published: 2013-12-10T02:00:00.000Z
Updated: 2024-08-06T16:45:13.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4124 vulnerable 2026-06-08 05:04:33.937263 Details available
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Published: 2013-08-05T15:00:00.000Z
Updated: 2024-08-06T16:30:50.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0214 vulnerable 2026-06-08 05:03:45.976822 Details available
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to hijack the authentication of arbitrary users by leveraging knowledge of a password and composing requests that perform SWAT actions.
Published: 2013-02-02T20:00:00.000Z
Updated: 2024-08-06T14:18:09.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0213 vulnerable 2026-06-08 05:03:45.919622 Details available
The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
Published: 2013-02-02T20:00:00.000Z
Updated: 2024-08-06T14:18:09.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1182 vulnerable 2026-06-08 05:00:48.084815 Details available
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
Published: 2012-04-10T21:00:00.000Z
Updated: 2024-08-06T18:53:36.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2724 vulnerable 2026-06-08 04:58:08.816881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0719 vulnerable 2026-06-08 04:56:38.841228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1642 vulnerable 2026-06-08 04:54:09.575276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1635 vulnerable 2026-06-08 04:54:09.516653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.