CVE-2007-0453

EPSS 0.53%
Veröffentlicht 06.02.2007 02:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 18

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samba ≫ Samba Version3.0.21

Samba ≫ Samba Version3.0.21a

Samba ≫ Samba Version3.0.21b

Samba ≫ Samba Version3.0.21c

Samba ≫ Samba Version3.0.22

Samba ≫ Samba Version3.0.23

Samba ≫ Samba Version3.0.23a

Samba ≫ Samba Version3.0.23b

Samba ≫ Samba Version3.0.23c

Samba ≫ Samba Version3.0.23d

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.663

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/24151

http://www.trustix.org/errata/2007/0007

http://secunia.com/advisories/24101

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916

http://www.securityfocus.com/archive/1/459365/100/0/threaded

http://www.vupen.com/english/advisories/2007/0483

https://issues.rpath.com/browse/RPL-1005

http://osvdb.org/33098

http://secunia.com/advisories/24043

http://securitytracker.com/id?1017589

http://us1.samba.org/samba/security/CVE-2007-0453.html

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html

http://www.securityfocus.com/archive/1/459168/100/0/threaded

http://www.securityfocus.com/bid/22410

https://exchange.xforce.ibmcloud.com/vulnerabilities/32231

https://nvd.nist.gov/vuln/detail/CVE-2007-0453

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0453

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0453

EUVD