Unscored severity · published Mar 3, 2004
CVE-2004-0082
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized…
–
CVSS
3.5%
EPSS
No
On KEV
Description
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
3.0.0; 3.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0082
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0082
us1.samba.org
http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-078.shtml
www.osvdb.org
http://www.osvdb.org/3919
Patch
http://www.redhat.com/support/errata/RHSA-2004-064.html
Patch
http://www.securityfocus.com/bid/9637
www.vuxml.org
http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…