CVE-2004-0882

CVE-2004-0882 describes a critical buffer overflow vulnerability in Samba 3.0.x through 3.0.7, specifically within the QFILEPATHINFO request handler. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending a specially crafted TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code like Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.