CVE-2004-1154

CVE-2004-1154 describes an integer overflow vulnerability in the Samba daemon (smbd) affecting Samba versions 2.x and 3.0.x through 3.0.9, including distributions like Red Hat and SUSE. This flaw allows remote authenticated users to trigger a heap-based buffer overflow by sending a Samba request with an excessive number of security descriptors. The vulnerability carries a critical CVSS score of 10.0, indicating a high potential for denial of service and arbitrary code execution with low attack complexity and no authentication required. While there is no known active exploitation or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness and potential interest among researchers.