CVE-2004-1154: Red Hat Fedora Core

High severity, CVSS 10.0. EPSS: 13.2% chance of exploitation in the next 30 days.

Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

Affected products

• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only
• Samba Samba: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …
• Suse Suse Linux: version 1.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Trustix Secure Linux: version 2.0 only; version 2.1 only; version 2.2 only

Published 2005-01-10. Last modified 2026-06-16.