10

CVE-2007-2446

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version 3.0.0
Samba ≫ Samba Version 3.0.1
Samba ≫ Samba Version 3.0.2
Samba ≫ Samba Version 3.0.2a
Samba ≫ Samba Version 3.0.10
Samba ≫ Samba Version 3.0.11
Samba ≫ Samba Version 3.0.12
Samba ≫ Samba Version 3.0.13
Samba ≫ Samba Version 3.0.14
Samba ≫ Samba Version 3.0.14a
Samba ≫ Samba Version 3.0.15
Samba ≫ Samba Version 3.0.16
Samba ≫ Samba Version 3.0.17
Samba ≫ Samba Version 3.0.18
Samba ≫ Samba Version 3.0.19
Samba ≫ Samba Version 3.0.20
Samba ≫ Samba Version 3.0.20a
Samba ≫ Samba Version 3.0.20b
Samba ≫ Samba Version 3.0.21
Samba ≫ Samba Version 3.0.21a
Samba ≫ Samba Version 3.0.21b
Samba ≫ Samba Version 3.0.21c
Samba ≫ Samba Version 3.0.22
Samba ≫ Samba Version 3.0.23
Samba ≫ Samba Version 3.0.23a
Samba ≫ Samba Version 3.0.23b
Samba ≫ Samba Version 3.0.23c
Samba ≫ Samba Version 3.0.23d
Samba ≫ Samba Version 3.0.24
Samba ≫ Samba Version 3.0.25 Update pre1
Samba ≫ Samba Version 3.0.25 Update pre2
Samba ≫ Samba Version 3.0.25 Update rc1
Samba ≫ Samba Version 3.0.25 Update rc2
Samba ≫ Samba Version 3.0.25 Update rc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 77.31% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://www.vupen.com/english/advisories/2007/3229
http://docs.info.apple.com/article.html?artnum=306172
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://secunia.com/advisories/26235
http://www.securityfocus.com/bid/25159
http://www.vupen.com/english/advisories/2007/2732
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
http://secunia.com/advisories/25255
Vendor Advisory
http://www.trustix.org/errata/2007/0017/
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://secunia.com/advisories/25232
Vendor Advisory
http://secunia.com/advisories/25241
Vendor Advisory
http://secunia.com/advisories/25246
Vendor Advisory
http://secunia.com/advisories/25251
Vendor Advisory
http://secunia.com/advisories/25256
Vendor Advisory
http://secunia.com/advisories/25259
Vendor Advisory
http://secunia.com/advisories/25270
Vendor Advisory
http://secunia.com/advisories/25289
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://security.gentoo.org/glsa/glsa-200705-15.xml
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://www.debian.org/security/2007/dsa-1291
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.securityfocus.com/archive/1/468670/100/0/threaded
http://www.ubuntu.com/usn/usn-460-1
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
https://issues.rpath.com/browse/RPL-1366
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://osvdb.org/34699
http://osvdb.org/34731
http://osvdb.org/34733
http://secunia.com/advisories/25257
Vendor Advisory
http://secunia.com/advisories/25391/
http://secunia.com/advisories/25567
http://secunia.com/advisories/28292
http://securityreason.com/securityalert/2702
http://www.kb.cert.org/vuls/id/773720
US Government Resource
http://www.osvdb.org/34732
http://www.redhat.com/support/errata/RHSA-2007-0354.html
Vendor Advisory
http://www.samba.org/samba/security/CVE-2007-2446.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/468542/100/0/threaded
http://www.securityfocus.com/archive/1/468672/100/0/threaded
http://www.securityfocus.com/archive/1/468673/100/0/threaded
http://www.securityfocus.com/archive/1/468674/100/0/threaded
http://www.securityfocus.com/archive/1/468675/100/0/threaded
http://www.securityfocus.com/archive/1/468680/100/0/threaded
http://www.securityfocus.com/bid/23973
http://www.securityfocus.com/bid/24195
http://www.securityfocus.com/bid/24196
http://www.securityfocus.com/bid/24197
http://www.securityfocus.com/bid/24198
http://www.securitytracker.com/id?1018050
http://www.vupen.com/english/advisories/2007/2079
http://www.vupen.com/english/advisories/2008/0050
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/34309
https://exchange.xforce.ibmcloud.com/vulnerabilities/34311
https://exchange.xforce.ibmcloud.com/vulnerabilities/34312
https://exchange.xforce.ibmcloud.com/vulnerabilities/34314
https://exchange.xforce.ibmcloud.com/vulnerabilities/34316
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415