CVE-2004-0686: Samba

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.

Affected products

• Samba Samba: from 2.2.0, before 2.2.10 (fixed in 2.2.10); from 3.0.0, before 3.0.5 (fixed in 3.0.5)
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only

Published 2004-07-27. Last modified 2026-06-16.