PT-2007-1061 · Samba+2 · Samba+2
Publicado
2007-11-15
·
Atualizado
2024-06-15
·
CVE-2007-5398
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Samba versions 3.0.0 through 3.0.26a
Samba version 3.0.25b
Description:
The issue concerns multiple vulnerabilities in the Samba package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability is a stack-based buffer overflow in the
reply netbios packet function in nmbd/nmbd packets.c in nmbd in Samba, when operating as a WINS server, allowing remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.Recommendations:
For Samba versions 3.0.0 through 3.0.26a, update to a version newer than 3.0.26a to resolve the issue.
For Samba version 3.0.25b, update to a version newer than 3.0.25b to resolve the issue.
As a temporary workaround, consider disabling the WINS server functionality until a patch is available.
Restrict access to the
nmbd service to minimize the risk of exploitation.Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Hp-Ux
Red Hat
Samba