Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2004-1154

CVSS 10.0 24 detections found
View on NVD →
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.

Detection rules

Source Rule Status Updated
suricata GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 3 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt rev 4 2019-07-26
suricata GPL NETBIOS SMB NT Trans NT CREATE DACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB NT Trans NT CREATE SACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt rev 5 2019-07-26
suricata GPL NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt rev 5 2019-07-26
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt rev 4 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt rev 5 2011-11-30
snort GPL NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 5 2011-09-20
snort GPL NETBIOS SMB-DS NT Trans NT CREATE unicode oversized Security Descriptor attempt rev 3 2011-09-20
snort GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt rev 5 2011-09-20