CVE-2008-1105 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:P/I:P/A:P
flexera	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 99%

Vendor	Product	Version
samba	samba	3.0.0 ≤ 𝑥 ≤ 3.0.29
canonical	ubuntu_linux	6.06
canonical	ubuntu_linux	7.04
canonical	ubuntu_linux	7.10
canonical	ubuntu_linux	8.04
debian	debian_linux	4.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

samba

bullseye (security)	2:4.13.13+dfsg-1~deb11u6 fixed
bullseye	2:4.13.13+dfsg-1~deb11u6 fixed
bookworm	2:4.17.12+dfsg-0+deb12u1 fixed
bookworm (security)	2:4.17.12+dfsg-0+deb12u1 fixed
sid	2:4.21.1+dfsg-2 fixed
trixie	2:4.21.1+dfsg-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

samba

hardy	Fixed 3.0.28a-1ubuntu4.2 released
gutsy	Fixed 3.0.26a-1ubuntu2.4 released
feisty	Fixed 3.0.24-2ubuntu1.6 released
dapper	Fixed 3.0.22-1ubuntu3.7 released

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html

http://lists.vmware.com/pipermail/security-announce/2008/000023.html

http://secunia.com/advisories/30228

http://secunia.com/advisories/30385

http://secunia.com/advisories/30396

http://secunia.com/advisories/30442

http://secunia.com/advisories/30449

http://secunia.com/advisories/30478

http://secunia.com/advisories/30489

http://secunia.com/advisories/30543

http://secunia.com/advisories/30736

http://secunia.com/advisories/30802

http://secunia.com/advisories/30835

http://secunia.com/advisories/31246

http://secunia.com/advisories/31911

http://secunia.com/advisories/33696

http://secunia.com/secunia_research/2008-20/advisory/

http://security.gentoo.org/glsa/glsa-200805-23.xml

http://securitytracker.com/id?1020123

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951

http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1

http://support.apple.com/kb/HT2163

http://wiki.rpath.com/Advisories:rPSA-2008-0180

http://www.debian.org/security/2008/dsa-1590

http://www.mandriva.com/security/advisories?name=MDVSA-2008:108

http://www.redhat.com/support/errata/RHSA-2008-0288.html

http://www.redhat.com/support/errata/RHSA-2008-0289.html

http://www.redhat.com/support/errata/RHSA-2008-0290.html

http://www.samba.org/samba/security/CVE-2008-1105.html

http://www.securityfocus.com/archive/1/492683/100/0/threaded

http://www.securityfocus.com/archive/1/492737/100/0/threaded

http://www.securityfocus.com/archive/1/492903/100/0/threaded

http://www.securityfocus.com/bid/29404

http://www.securityfocus.com/bid/31255

http://www.ubuntu.com/usn/usn-617-1

http://www.ubuntu.com/usn/usn-617-2

http://www.vupen.com/english/advisories/2008/1681

http://www.vupen.com/english/advisories/2008/1908

http://www.vupen.com/english/advisories/2008/1981/references

http://www.vupen.com/english/advisories/2008/2222/references

http://www.vupen.com/english/advisories/2008/2639

http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

https://exchange.xforce.ibmcloud.com/vulnerabilities/42664

https://exchange.xforce.ibmcloud.com/vulnerabilities/45251

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733

https://www.exploit-db.com/exploits/5712

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html

http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html

http://lists.vmware.com/pipermail/security-announce/2008/000023.html

http://secunia.com/advisories/30228

http://secunia.com/advisories/30385

http://secunia.com/advisories/30396

http://secunia.com/advisories/30442

http://secunia.com/advisories/30449

http://secunia.com/advisories/30478

http://secunia.com/advisories/30489

http://secunia.com/advisories/30543

http://secunia.com/advisories/30736

http://secunia.com/advisories/30802

http://secunia.com/advisories/30835

http://secunia.com/advisories/31246

http://secunia.com/advisories/31911

http://secunia.com/advisories/33696

http://secunia.com/secunia_research/2008-20/advisory/

http://security.gentoo.org/glsa/glsa-200805-23.xml

http://securitytracker.com/id?1020123

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951

http://sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1

http://support.apple.com/kb/HT2163

http://wiki.rpath.com/Advisories:rPSA-2008-0180

http://www.debian.org/security/2008/dsa-1590

http://www.mandriva.com/security/advisories?name=MDVSA-2008:108

http://www.redhat.com/support/errata/RHSA-2008-0288.html

http://www.redhat.com/support/errata/RHSA-2008-0289.html

http://www.redhat.com/support/errata/RHSA-2008-0290.html

http://www.samba.org/samba/security/CVE-2008-1105.html

http://www.securityfocus.com/archive/1/492683/100/0/threaded

http://www.securityfocus.com/archive/1/492737/100/0/threaded

http://www.securityfocus.com/archive/1/492903/100/0/threaded

http://www.securityfocus.com/bid/29404

http://www.securityfocus.com/bid/31255

http://www.ubuntu.com/usn/usn-617-1

http://www.ubuntu.com/usn/usn-617-2

http://www.vupen.com/english/advisories/2008/1681

http://www.vupen.com/english/advisories/2008/1908

http://www.vupen.com/english/advisories/2008/1981/references

http://www.vupen.com/english/advisories/2008/2222/references

http://www.vupen.com/english/advisories/2008/2639

http://www.xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

https://exchange.xforce.ibmcloud.com/vulnerabilities/42664

https://exchange.xforce.ibmcloud.com/vulnerabilities/45251

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10020

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733

https://www.exploit-db.com/exploits/5712

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01006.html

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01030.html

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01082.html