CVE-2004-0807

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and...

5.0 MediumFix available

CVE-2004-0807 is a medium vulnerability (CVSS 5.0) in Samba, published September 13, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.50%, the 92nd percentile. Fixed in samba 3.0.7.

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

Exploit likelihood

5.50%Up 3.3 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2004-0807
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2004-0807
Updated: 2026-11-02

EUVDEUVD-2004-0805 No score

Record: EUVD-2004-0805
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8w98-f339-9fh8 No score

Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and...

Record: GHSA-8w98-f339-9fh8
Updated: 2026-11-02

OSV No score

Record: CVE-2004-0807
Updated: 2026-11-02

OSVDEBIAN-CVE-2004-0807 No score

Record: DEBIAN-CVE-2004-0807
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`samba` Debian:12	before 3.0.7	3.0.7
`samba` Debian:13	before 3.0.7	3.0.7
`samba` Debian:14	before 3.0.7	3.0.7
`samba` Red Hat:enterprise_linux:3::as	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-client` Red Hat:enterprise_linux:3::as	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-common` Red Hat:enterprise_linux:3::as	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-debuginfo` Red Hat:enterprise_linux:3::as	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-swat` Red Hat:enterprise_linux:3::as	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba` Red Hat:enterprise_linux:3::desktop	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-client` Red Hat:enterprise_linux:3::desktop	before 0:3.0.7-1.3E	0:3.0.7-1.3E

Show 13 moreShow less

Affected packages
Package	Affected	Fixed
`samba-common` Red Hat:enterprise_linux:3::desktop	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-swat` Red Hat:enterprise_linux:3::desktop	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba` Red Hat:enterprise_linux:3::es	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-client` Red Hat:enterprise_linux:3::es	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-common` Red Hat:enterprise_linux:3::es	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-debuginfo` Red Hat:enterprise_linux:3::es	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-swat` Red Hat:enterprise_linux:3::es	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba` Red Hat:enterprise_linux:3::ws	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-client` Red Hat:enterprise_linux:3::ws	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-common` Red Hat:enterprise_linux:3::ws	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:3.0.7-1.3E	0:3.0.7-1.3E
`samba-swat` Red Hat:enterprise_linux:3::ws	before 0:3.0.7-1.3E	0:3.0.7-1.3E

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 18 moreShow less