What is CVE-2008-1105?

CVE-2008-1105 is a vulnerability in N/a. Published 2008-05-29.

Is CVE-2008-1105 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2008-1105

Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.

EPSS: 0.857 (99.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

RHSA-2008:0288 (x_refsource_REDHAT, vendor-advisory)
30478 (x_refsource_SECUNIA, third-party-advisory)
FEDORA-2008-4724 (x_refsource_FEDORA, vendor-advisory)
30396 (x_refsource_SECUNIA, third-party-advisory)
support.apple.com/kb/HT2163 (x_refsource_CONFIRM)
30489 (x_refsource_SECUNIA, third-party-advisory)
ADV-2008-2639 (vdb-entry, x_refsource_VUPEN)
1020123 (vdb-entry, x_refsource_SECTRACK)
30835 (x_refsource_SECUNIA, third-party-advisory)
ADV-2008-1981 (vdb-entry, x_refsource_VUPEN)

Frequently asked questions

What is CVE-2008-1105?: CVE-2008-1105 is a vulnerability in N/a. Published 2008-05-29.
Is CVE-2008-1105 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.