CVE-2004-0082: Samba

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.

Affected products

• Samba Samba: version 3.0.0 only; version 3.0.1 only

Published 2004-03-03. Last modified 2026-06-16.