CVE-2007-0453

EPSS 0.53%
Published 06.02.2007 02:28:00
Last modified 09.04.2025 00:30:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

Affected products Warnungen 0 Metrics 2 CWE 0 References 18

Data is provided by the National Vulnerability Database (NVD)

Samba ≫ Samba Version3.0.21

Samba ≫ Samba Version3.0.21a

Samba ≫ Samba Version3.0.21b

Samba ≫ Samba Version3.0.21c

Samba ≫ Samba Version3.0.22

Samba ≫ Samba Version3.0.23

Samba ≫ Samba Version3.0.23a

Samba ≫ Samba Version3.0.23b

Samba ≫ Samba Version3.0.23c

Samba ≫ Samba Version3.0.23d

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.53%	0.663

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/24151

http://www.trustix.org/errata/2007/0007

http://secunia.com/advisories/24101

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916

http://www.securityfocus.com/archive/1/459365/100/0/threaded

http://www.vupen.com/english/advisories/2007/0483

https://issues.rpath.com/browse/RPL-1005

http://osvdb.org/33098

http://secunia.com/advisories/24043

http://securitytracker.com/id?1017589

http://us1.samba.org/samba/security/CVE-2007-0453.html

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html

http://www.securityfocus.com/archive/1/459168/100/0/threaded

http://www.securityfocus.com/bid/22410

https://exchange.xforce.ibmcloud.com/vulnerabilities/32231

https://nvd.nist.gov/vuln/detail/CVE-2007-0453

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0453

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0453

EUVD