CVE-2004-2086: Sambar Server

Medium severity, CVSS 5.0. EPSS: 75.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.

Affected products

• Sambar Sambar Server: version 6.0 only

Published 2004-02-06. Last modified 2026-06-16.