PT-2007-1060 · Samba+2 · Samba+2

Alin Rad Pop · Published 2007-11-15 · Updated 2024-06-15 · CVE-2007-4572

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Samba versions 3.0.0 through 3.0.26a Samba version 3.0.25b

Description: The issue concerns multiple vulnerabilities in the Samba package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. A specific vulnerability is a stack-based buffer overflow in nmbd, related to handling GETDC logon server requests, allowing remote attackers to have an unknown impact via crafted GETDC mailslot requests.

Recommendations: For Samba versions 3.0.0 through 3.0.26a, update to a version newer than 3.0.26a to resolve the issue. For Samba version 3.0.25b, update to a version newer than 3.0.25b to resolve the issue. As a temporary workaround, consider restricting access to the nmbd service until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-264

Related Identifiers

BDU:2015-06506

BDU:2015-06511

BDU:2015-06516

BDU:2015-06524

BDU:2015-09599

CVE-2007-4572

DSA-1409-1

DSA-1409-2

DSA-1409-3

HPSBUX02316

HPSBUX02341

OPENSUSE-SU-2024:10683-1

OPENSUSE-SU-2024:11365-1

RHSA-2007:1013

RHSA-2007:1016

RHSA-2007:1017

RHSA-2007_1016

RHSA-2007_1017

Affected Products

Hp-Ux

Red Hat

Samba

References · 143

• https://usn.ubuntu.com/544-1 · Vendor Advisory
• http://ubuntu.com/usn/usn-544-2 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200711-29.xml · Vendor Advisory
• http://secunia.com/advisories/27701 · Vendor Advisory
• http://ubuntu.com/usn/usn-617-1 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-November/msg00472.html · Vendor Advisory
• http://us1.samba.org/samba/security/CVE-2007-4572.html · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4572 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=120524782005154&w=2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06506 · Security Note
• https://bdu.fstec.ru/vul/2015-06516 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-4572 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-1013.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1105 · Security Note