CVE-2004-2409: Samhain Labs Samhain

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.

Affected products

• Samhain Labs Samhain: version 1.8.9 only; version 1.8.10 only; version 1.8.10a only; version 1.8.10b only; version 1.8.11 only; version 1.8.12 only; …

Published 2004-12-31. Last modified 2026-06-16.