CVE-2008-1105: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 69.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 7.04 only; version 7.10 only; version 8.04 only
• Debian Debian Linux: version 4.0 only
• Samba Samba: from 3.0.0, up to and including 3.0.29

Published 2008-05-29. Last modified 2026-06-16.