CVE:CVE-2004-0882
CNNVD:CNNVD-200501-295
Samba是一款开源的SMB(Server Messages Block)协议实现软件，提供绝大多数Windows系统的SMB文件及打印共享服务。
Samba 3.0.x至3.0.7版本中的QFIKEPATHINFO处理存在缓冲区溢出漏洞。
远程攻击者可利用此漏洞，通过包含一个很小"maximum data bytes"值的TRANSACT2_QFILEPATHINFO请求，执行任意代码。
solution:Upgrade samba samba to a higher version than 3.0.0,3.0.1,3.0.2,3.0.2a,3.0.3,3.0.4,3.0.4:rc1,3.0.5,3.0.6,3.0.7,and avoid the version 3.0.0,3.0.1,3.0.2,3.0.2a,3.0.3,3.0.4,3.0.4:rc1,3.0.5,3.0.6,3.0.7; Upgrade conectiva linux to a higher version than 10.0,and avoid the version 10.0; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_2.0,core_3.0,and avoid the version core_2.0,core_3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1