CVE-2004-0600
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote...
CVE-2004-0600 is a high vulnerability (CVSS 10.0) in Samba, published July 23, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 29.4%, the 98th percentile. Fixed in samba 3.0.5.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 29.4%EPSS, 98th percentile
- Exploitation
- None known1 public exploit
- Fixed in
3.0.5samba +18 more
Description
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 | before 3.0.5 | 3.0.5 |
sambaDebian:13 | before 3.0.5 | 3.0.5 |
sambaDebian:14 | before 3.0.5 | 3.0.5 |
sambaRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-clientRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-commonRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-swatRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
sambaRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-clientRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-commonRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-swatRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
sambaRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-clientRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-commonRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-swatRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
sambaRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-clientRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-commonRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
samba-swatRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:3.0.4-6.3E | 0:3.0.4-6.3E |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Samba 3.0.4 - SWAT Authorisation Buffer Overflow | 2004-07-22 |
What each source reports
NVD Score used
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
CVE-2004-0600- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
CVE-2004-0600- Updated
- 2026-11-02
EUVDEUVD-2004-0599No score
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
EUVD-2004-0599- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6wf7-h6x3-vqqjNo score
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote...
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
GHSA-6wf7-h6x3-vqqj- Updated
- 2026-11-02
OSVNo score
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
CVE-2004-0600- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0600No score
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
- Record
DEBIAN-CVE-2004-0600- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
trustix.org/errata/2004/0039
exchange.xforce.ibmcloud.com/vulnerabilities/16785
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000851
redhat.com/support/errata/RHSA-2004-259.html
marc.info?l=bugtraq&m=109052891507263&w=2
Show 34 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445
novell.com/linux/security/advisories/2004_22_samba.html
mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071
gentoo.org/security/en/glsa/glsa-200407-21.xml
nvd.nist.gov/vuln/detail/CVE-2004-0600
github.com/advisories/GHSA-6wf7-h6x3-vqqj
security-tracker.debian.org/tracker/CVE-2004-0600
access.redhat.com/errata/RHSA-2004:259
bugzilla.redhat.com/show_bug.cgi?id=102715
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_259.json
cve.org/CVERecord?id=CVE-2004-0600