CVE-2007-6015
Estado: ModificadaAlta (9.3)—💥 Exploit
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 27%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
💥 Exploits públicos
Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.
- Publicado en Exploit-DB · Samba 3.0.27a - 'send_mailslot()' Remote Buffer Overflow (14/12/2007)
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://bugs.gentoo.org/show_bug.cgi?id=200773
- http://docs.info.apple.com/article.html?artnum=307430
- http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
- http://lists.vmware.com/pipermail/security-announce/2008/000005.html
- http://marc.info/?l=bugtraq&m=120524782005154&w=2
- http://secunia.com/advisories/27760
- http://secunia.com/advisories/27894
- http://secunia.com/advisories/27977
- http://secunia.com/advisories/27993
- http://secunia.com/advisories/27999
- http://secunia.com/advisories/28003
- http://secunia.com/advisories/28028
- http://secunia.com/advisories/28029
- http://secunia.com/advisories/28037
- http://secunia.com/advisories/28067
- http://secunia.com/advisories/28089
- http://secunia.com/advisories/28891
- http://secunia.com/advisories/29032
- http://secunia.com/advisories/29341
- http://secunia.com/advisories/30484
- http://secunia.com/advisories/30835
- http://secunia.com/secunia_research/2007-99/advisory/
- http://security.gentoo.org/glsa/glsa-200712-10.xml
- http://securityreason.com/securityalert/3438
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1
- http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm
- http://www.debian.org/security/2007/dsa-1427
- http://www.kb.cert.org/vuls/id/438395
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:244
- http://www.novell.com/linux/security/advisories/2007_68_samba.html
- http://www.redhat.com/support/errata/RHSA-2007-1114.html
- http://www.redhat.com/support/errata/RHSA-2007-1117.html
- http://www.samba.org/samba/security/CVE-2007-6015.html
- http://www.securityfocus.com/archive/1/484818/100/0/threaded
- http://www.securityfocus.com/archive/1/484825/100/0/threaded
- http://www.securityfocus.com/archive/1/484827/100/0/threaded
- http://www.securityfocus.com/archive/1/485144/100/0/threaded
- http://www.securityfocus.com/archive/1/488457/100/0/threaded
- http://www.securityfocus.com/bid/26791
- http://www.securitytracker.com/id?1019065
- http://www.ubuntu.com/usn/usn-556-1
- http://www.us-cert.gov/cas/techalerts/TA08-043B.html
- http://www.vupen.com/english/advisories/2007/4153
- http://www.vupen.com/english/advisories/2008/0495/references
- http://www.vupen.com/english/advisories/2008/0637
- http://www.vupen.com/english/advisories/2008/0859/references
- http://www.vupen.com/english/advisories/2008/1712/references
- http://www.vupen.com/english/advisories/2008/1908
- http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38965
- https://issues.rpath.com/browse/RPL-1976
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html
- http://bugs.gentoo.org/show_bug.cgi?id=200773
- http://docs.info.apple.com/article.html?artnum=307430
- http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html
- http://lists.vmware.com/pipermail/security-announce/2008/000005.html
- http://marc.info/?l=bugtraq&m=120524782005154&w=2
- http://secunia.com/advisories/27760
- http://secunia.com/advisories/27894
- http://secunia.com/advisories/27977
- http://secunia.com/advisories/27993
- http://secunia.com/advisories/27999
- http://secunia.com/advisories/28003
- http://secunia.com/advisories/28028
- http://secunia.com/advisories/28029
- http://secunia.com/advisories/28037
- http://secunia.com/advisories/28067
- http://secunia.com/advisories/28089
- http://secunia.com/advisories/28891
- http://secunia.com/advisories/29032
- http://secunia.com/advisories/29341
- http://secunia.com/advisories/30484
- http://secunia.com/advisories/30835
- http://secunia.com/secunia_research/2007-99/advisory/
- http://security.gentoo.org/glsa/glsa-200712-10.xml
- http://securityreason.com/securityalert/3438
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1
- http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm
- http://www.debian.org/security/2007/dsa-1427
- http://www.kb.cert.org/vuls/id/438395
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:244
- http://www.novell.com/linux/security/advisories/2007_68_samba.html
- http://www.redhat.com/support/errata/RHSA-2007-1114.html
- http://www.redhat.com/support/errata/RHSA-2007-1117.html
- http://www.samba.org/samba/security/CVE-2007-6015.html
- http://www.securityfocus.com/archive/1/484818/100/0/threaded
- http://www.securityfocus.com/archive/1/484825/100/0/threaded
- http://www.securityfocus.com/archive/1/484827/100/0/threaded
- http://www.securityfocus.com/archive/1/485144/100/0/threaded
- http://www.securityfocus.com/archive/1/488457/100/0/threaded
- http://www.securityfocus.com/bid/26791
- http://www.securitytracker.com/id?1019065
- http://www.ubuntu.com/usn/usn-556-1
- http://www.us-cert.gov/cas/techalerts/TA08-043B.html
- http://www.vupen.com/english/advisories/2007/4153
- http://www.vupen.com/english/advisories/2008/0495/references
- http://www.vupen.com/english/advisories/2008/0637
- http://www.vupen.com/english/advisories/2008/0859/references
- http://www.vupen.com/english/advisories/2008/1712/references
- http://www.vupen.com/english/advisories/2008/1908
- http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38965
- https://issues.rpath.com/browse/RPL-1976
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-6015",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "PSIRT-CNA@flexerasoftware.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-12-13T21:46:00.000",
"references": [
{
"url": "http://bugs.gentoo.org/show_bug.cgi?id=200773",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://docs.info.apple.com/article.html?artnum=307430",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=120524782005154&w=2",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/27760",
"tags": [
"Vendor Advisory"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/27894",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/27977",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/27993",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/27999",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28003",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28028",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28029",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28037",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28067",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28089",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/28891",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/29032",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/29341",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/30484",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/30835",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/secunia_research/2007-99/advisory/",
"tags": [
"Vendor Advisory"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200712-10.xml",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://securityreason.com/securityalert/3438",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.debian.org/security/2007/dsa-1427",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.kb.cert.org/vuls/id/438395",
"tags": [
"US Government Resource"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:244",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.novell.com/linux/security/advisories/2007_68_samba.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2007-1114.html",
"tags": [
"Patch"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2007-1117.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.samba.org/samba/security/CVE-2007-6015.html",
"tags": [
"Patch"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/archive/1/484818/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/archive/1/484825/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/archive/1/484827/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/archive/1/485144/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/bid/26791",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securitytracker.com/id?1019065",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.ubuntu.com/usn/usn-556-1",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA08-043B.html",
"tags": [
"US Government Resource"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2007/4153",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0495/references",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0637",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0859/references",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1712/references",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1908",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38965",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://issues.rpath.com/browse/RPL-1976",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://bugs.gentoo.org/show_bug.cgi?id=200773",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://docs.info.apple.com/article.html?artnum=307430",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.vmware.com/pipermail/security-announce/2008/000005.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=120524782005154&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/27760",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/27894",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/27977",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/27993",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/27999",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28003",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28028",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28029",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28037",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28067",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28089",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/28891",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/29032",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/29341",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/30484",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/30835",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/secunia_research/2007-99/advisory/",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-200712-10.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securityreason.com/securityalert/3438",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2007/dsa-1427",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/438395",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:244",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.novell.com/linux/security/advisories/2007_68_samba.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2007-1114.html",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2007-1117.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.samba.org/samba/security/CVE-2007-6015.html",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/484818/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/484825/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/484827/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/485144/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/488457/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/26791",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1019065",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/usn-556-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA08-043B.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/4153",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0495/references",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0637",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/0859/references",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1712/references",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/1908",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38965",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://issues.rpath.com/browse/RPL-1976",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11572",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5605",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00304.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00308.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the \"domain logons\" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request."
},
{
"lang": "es",
"value": "Desbordamiento de búfer basado en pila en la función send_mailslot de nmbd en Samba 3.0.0 hasta 3.0.27a, cuando la opción \"inicios de sesión de dominio\" está habilitada, permite a atacantes remotos ejecutar código de su elección mediante una petición de ranura de buzón GETDC compuesta de una cadena larga GETDC a la que sigue un nombre de usuario en una petición de inicio de sesión SAMLOGON."
}
],
"lastModified": "2026-06-16T22:47:15.657",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:samba:samba:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76D03B96-8FF3-4FC6-BC38-288F3ADBA9BD"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDF2248C-5A71-49FC-88F4-2D1F376155FD"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4FD10B2-ED2D-4F55-8F0E-77429C8A716E"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8F15704-2F2B-4536-A2A0-510B5CE91D09"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93AF43FA-9947-4F26-96E8-1D77BF909AA0"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4A46D8D-1535-400B-B1CD-AA2685F4164D"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CB46ABA-F403-4715-915D-870BD221C8FE"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFD51F01-B47A-47F5-8798-2EB53EB17297"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C127A2E6-F94F-41D5-82AA-60C0190186BF"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61291A4C-28A3-433B-80D2-005976851882"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65AC9643-E1A5-4013-9607-17C6CC7CC63B"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "090E2541-2DBA-41CB-A792-9E703C797949"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19F65FF3-71F8-4278-A823-A6E0FF65D9F1"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C71CB60-2689-4A4A-9509-E2F3135E6491"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0129E404-3AE8-4F0E-89CB-7F2FA5B47011"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "614547F5-9C3F-489B-9B72-91B0FF646CCC"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A052141C-874D-4ED0-99FB-D7468FACFC6E"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9739EA65-9FA8-425E-B355-E690773D5B1B"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B618F94-DAC2-4A97-9F7F-8BCEA3199769"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE7C057-B024-4417-B572-5D396366620E"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFCD334C-FB95-41A6-8F4C-FCC4E70CE930"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75C86202-3150-440C-B048-BB039E9D3606"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0"
},
{
"criteria": "cpe:2.3:a:samba:samba:2.2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04F39AA5-9048-4EE9-B0F2-CE679C673F0E"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "216145B7-4716-42F7-90DC-03884ECB2271"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "898968E5-577E-4B86-A804-EBEC67157A61"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "920EF846-41D1-429D-AF0F-3D7950F93069"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13E6C8A4-FA17-44EF-A447-C73108540B59"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57D5EA00-CC2E-4E56-8297-A3C1CEDBBE06"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50E05AD3-C7F0-421D-8C9B-604E553332E2"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A53517C-F12D-4D74-A722-5AE23598CEC4"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BF4A0A7-E176-4009-BAA2-E23B330D91A6"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42EB6115-CC45-4464-8400-D7E3A9402803"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F002F105-A911-4E56-8630-C287DC527E05"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1936E19-9887-4E53-AA0C-738ABD4B97EE"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2206C09-6A4B-4EC4-A206-E48EDF966913"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B918306-8743-404D-A035-CC3997ADCC3C"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43684906-D3AA-40FB-A75D-ED65C1DC9BB4"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62E39538-4811-49DB-97CF-1F018C58BAE4"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C85D69FE-AF43-4B0E-A7A9-2D2C16426180"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86347948-C08F-4F02-89A0-4F4A55CD4BA7"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CA7905C-51A0-4A56-A6A5-330288613055"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4600AAA4-834D-4F63-8E9A-88CB555C029E"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BFA3B82-9440-49E1-8088-FA22C0B7DD88"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0762B1DA-7232-478D-805F-5E2A50F8BEAB"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F22FC74-5999-4158-A253-674BF1C21E2F"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EEB31C4-5352-4905-8D9E-BD754991F07E"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0BE2AEC-6ACD-422C-AD20-6C034D68C891"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "101163D7-D440-43CC-8704-A9614CD8CEE7"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B69EA9CF-627C-4600-B4EC-10E91DB07E1B"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A973443-C497-41FB-AF47-529AA2906CCF"
},
{
"criteria": "cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}