CVE-2004-0686 json
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown i…
published 2004-07-23 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0685
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.7%
- EPSS 3.7% chance of exploitation in 30 days, percentile 89%
- public exploits
- 0
- none known
Summary
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
Patch / fix
- samba samba 2.2.10, 3.0.5
- samba Debian 14, Debian 13, Debian 12 3.0.5
debian advisories DEBIAN-CVE-2004-0686
- samba RHEL 3 3.0.4-6.3E
- samba-swat RHEL 3 3.0.4-6.3E
- samba-client RHEL 3 3.0.4-6.3E
- samba-common RHEL 3 3.0.4-6.3E
red hat advisories RHSA-2004:259
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2004-0686 updated
security flaw
-
Red Hat Desktop version 3 samba 3.0.4-6.3E, samba-swat 3.0.4-6.3E, samba-client 3.0.4-6.3E, samba-common 3.0.4-6.3E Red Hat Enterprise Linux AS version 3 samba 3.0.4-6.3E, samba-swat 3.0.4-6.3E, samba-client 3.0.4-6.3E, samba-common 3.0.4-6.3Efixed: vendor fix RHSA-2004:259
-
Red Hat Enterprise Linux ES version 2.1fixed: vendor fix RHSA-2004:404
-
Red Hat Enterprise Linux ES version 3 samba 3.0.4-6.3E, samba-swat 3.0.4-6.3E, samba-client 3.0.4-6.3E, samba-common 3.0.4-6.3Efixed: vendor fix RHSA-2004:259
-
Red Hat Enterprise Linux WS version 2.1fixed: vendor fix RHSA-2004:404
-
Red Hat Enterprise Linux WS version 3 samba 3.0.4-6.3E, samba-swat 3.0.4-6.3E, samba-client 3.0.4-6.3E, samba-common 3.0.4-6.3Efixed: vendor fix RHSA-2004:259
-
Red Hat Linux Advanced Workstation 2.1fixed: vendor fix RHSA-2004:404
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
3.67% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
References
-
redhat.com
/support/errata/RHSA-2004-259.html
vendor-advisory, patch, third-party-advisory
-
trustix.org
/errata/2004/0039/
vendor-advisory, third-party-advisory
-
distro.conectiva.com.br
/atualizacoes/?id=a&anuncio=000851
vendor-advisory, third-party-advisory
-
distro.conectiva.com.br
/atualizacoes/?id=a&anuncio=000854
vendor-advisory, third-party-advisory
-
novell.com
/linux/security/advisories/2004_22_samba.html
vendor-advisory, broken-link
-
mandrakesecure.net
/en/advisories/advisory.php?name=MDKSA-2004:071
vendor-advisory, broken-link
-
marc.info
/?l=bugtraq&m=109785827607823&w=2
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=109094272328981&w=2
vendor-advisory, mailing-list, third-party-advisory
-
gentoo.org
/security/en/glsa/glsa-200407-21.xml
vendor-advisory, third-party-advisory
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-57664-1
vendor-advisory, broken-link
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-101584-1
vendor-advisory, broken-link
-
marc.info
/?l=bugtraq&m=109052891507263&w=2
mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=109051533021376&w=2
mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=109051340810458&w=2
mailing-list, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/16786
vdb-entry, third-party-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461
vdb-entry, signature, third-party-advisory
Sources
- CVE List CVE-2004-0686
- NVD CVE-2004-0686
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.