CVE-2004-0807: Conectiva Linux

Medium severity, CVSS 5.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

Affected products

• Conectiva Linux: version 9.0 only; version 10.0 only
• Mandrakesoft Mandrake Linux: version 10.0 only
• Samba Samba: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.2a only; version 3.0.3 only; version 3.0.4 only; …
• Sgi Samba: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …
• Suse Suse Linux: version 8 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only

Published 2004-09-13. Last modified 2026-06-16.