CVE-2004-0808: Samba

Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days.

The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.

Affected products

• Samba Samba: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.2a only; version 3.0.3 only; version 3.0.4 only; …

Published 2004-12-31. Last modified 2026-06-16.