{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-02-18T00:00:00", "descriptions": [{"lang": "en", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-07-17T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "9637", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "tags": ["third-party-advisory", "government-resource", "x_refsource_CIAC"], "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/3919"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-0082", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "9637", "refsource": "BID", "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "refsource": "CIAC", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"name": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html", "refsource": "CONFIRM", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"name": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt", "refsource": "CONFIRM", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "refsource": "OSVDB", "url": "http://www.osvdb.org/3919"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T00:01:23.636Z"}, "title": "CVE Program Container", "references": [{"name": "9637", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/9637"}, {"name": "samba-mksmbpasswd-gain-access(15132)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"name": "O-078", "tags": ["third-party-advisory", "government-resource", "x_refsource_CIAC", "x_transferred"], "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"name": "oval:org.mitre.oval:def:827", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"name": "RHSA-2004:064", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"name": "3919", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/3919"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-0082", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2004-01-19T00:00:00", "dateUpdated": "2024-08-08T00:01:23.636Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919", "vulnerable": true}, {"criteria": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "216145B7-4716-42F7-90DC-03884ECB2271", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."}, {"lang": "es", "value": "mksmbpasswd en Samba 3.0.0 y 3.0.1, cuando se crea una cuenta pero se marca como desactivada, puede sobreescribir la contrase\u00f1a de usaurio con un b\u00fafer sin inicializar, lo que podr\u00eda activar la cuenta con una contrase\u00f1a m\u00e1s facil de adivinar."}], "id": "CVE-2004-0082", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-03-03T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"source": "cve@mitre.org", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/3919"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9637"}, {"source": "cve@mitre.org", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ciac.org/ciac/bulletins/o-078.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/3919"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2004-064.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9637"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15132"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank the Samba team for reporting this issue.", "affected_release": [{"advisory": "RHSA-2004:064", "cpe": "cpe:/o:redhat:enterprise_linux:3", "package": "samba-0:3.0.2-6.3E", "product_name": "Red Hat Enterprise Linux 3", "release_date": "2004-02-18T00:00:00Z"}], "bugzilla": {"description": "security flaw", "id": "1617143", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617143"}, "csaw": false, "details": ["The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."], "name": "CVE-2004-0082", "public_date": "2004-02-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2004-0082\nhttps://nvd.nist.gov/vuln/detail/CVE-2004-0082"], "threat_severity": "Low"}