PT-2007-1122 · Samba+2 · Samba+2

Publicado

2007-12-10

·

Atualizado

2024-06-15

·

CVE-2007-6015

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Samba versions 3.0.0 through 3.0.27a
Description: The issue is related to a stack-based buffer overflow in the send mailslot function in nmbd when the "domain logons" option is enabled. This can be exploited remotely via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request, potentially leading to the execution of arbitrary code. The exploitation of this issue may result in a violation of confidentiality, integrity, and availability of protected information.
Recommendations: For Samba versions 3.0.0 through 3.0.27a, update to version 3.0.28 or later to resolve the issue. As a temporary workaround, consider disabling the "domain logons" option to minimize the risk of exploitation. Restrict access to the nmbd service to reduce the attack surface until a patch is applied.

Exploit

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2020-2443
ALT-PU-2020-2475
ALT-PU-2021-1547
BDU:2015-09613
CVE-2007-6015
DSA-1427-1
DTSA-100-1
HPSBUX02316
HPSBUX02341
OPENSUSE-SU-2024:10683-1
OPENSUSE-SU-2024:11365-1
RHSA-2007:1114
RHSA-2007:1117
RHSA-2007_1114

Produtos afetados

Alt Linux
Red Hat
Samba