CVE-2008-1105
HighPublic exploitHeap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
Published May 29, 2008 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2008-1105, DSA-1590-1
Key Facts
Patch immediately- CVE-2008-1105 is a high-severity vulnerability (CVSS 7.5 v2) affecting Samba, Ubuntu Linux (Canonical), Debian Linux and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 69% probability of exploitation in the next 30 days.
- Fixed versions are available, including cifs-utils 6.13-1.3, cifs-utils-devel 6.13-1.3, ctdb 4.14.6+git.182.2205d5224e3-1.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
69%
Higher than 99.3% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2008-1105 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
Affected Products
110 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| SambaSamba | See advisory | 3.0.29 |
| Ubuntu LinuxCanonical | 6.06, 7.04, 7.10, 8.04 | n/a |
| Debian LinuxDebian | 4.0 | n/a |
| rootio-sambarootio | See advisory | 1:3.0.30-1 |
| samba-clientoracle | See advisory | 3.0.28-1.el5_2.1 |
Patched Releases
cifs-utils
6.13-1.3
cifs-utils-devel
6.13-1.3
ctdb
4.14.6+git.182.2205d5224e3-1.1
ctdb-pcp-pmda
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-binding0
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-binding0-32bit
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-devel
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-samr-devel
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-samr0
4.14.6+git.182.2205d5224e3-1.1
libdcerpc-samr0-32bit
4.14.6+git.182.2205d5224e3-1.1
libdcerpc0
4.14.6+git.182.2205d5224e3-1.1
libdcerpc0-32bit
4.14.6+git.182.2205d5224e3-1.1
libndr-devel
4.14.6+git.182.2205d5224e3-1.1
libndr-krb5pac-devel
4.14.6+git.182.2205d5224e3-1.1
libndr-krb5pac0
4.14.6+git.182.2205d5224e3-1.1
libndr-krb5pac0-32bit
4.14.6+git.182.2205d5224e3-1.1
libndr-nbt-devel
4.14.6+git.182.2205d5224e3-1.1
libndr-nbt0
4.14.6+git.182.2205d5224e3-1.1
libndr-nbt0-32bit
4.14.6+git.182.2205d5224e3-1.1
libndr-standard-devel
4.14.6+git.182.2205d5224e3-1.1
libndr-standard0
4.14.6+git.182.2205d5224e3-1.1
libndr-standard0-32bit
4.14.6+git.182.2205d5224e3-1.1
libndr1
4.14.6+git.182.2205d5224e3-1.1
libndr1-32bit
4.14.6+git.182.2205d5224e3-1.1
libnetapi-devel
4.14.6+git.182.2205d5224e3-1.1
Timeline
Publicly disclosed
May 29, 2008
Last updated
Aug 4, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- advisoryAPPLE-SA-2008-06-30
- advisorySUSE-SA:2008:026
- advisory[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix
- advisoryRHSA-2008:0288
- advisoryRHSA-2008:0289
FAQ
Common Questions.
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
Affected: Samba; Ubuntu Linux (Canonical) versions 6.06, 7.04, 7.10, 8.04; Debian Linux versions 4.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including cifs-utils 6.13-1.3, cifs-utils-devel 6.13-1.3, ctdb 4.14.6+git.182.2205d5224e3-1.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2008-1105 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo