Lucene search

K
freebsdFreeBSDA63B15F9-97FF-11DC-9E48-0016179B2DD5
HistoryNov 15, 2007 - 12:00 a.m.

samba -- multiple vulnerabilities

2007-11-1500:00:00
vuxml.freebsd.org
27

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

The Samba Team reports:

Secunia Research reported a vulnerability that allows for
the execution of arbitrary code in nmbd. This defect may
only be exploited when the “wins support” parameter has
been enabled in smb.conf.

Samba developers have discovered what is believed to be
a non-exploitable buffer over in nmbd during the processing
of GETDC logon server requests. This code is only used
when the Samba server is configured as a Primary or Backup
Domain Controller.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsamba< 3.0.26aUNKNOWN
FreeBSDanynoarchsamba3< 3.0.26aUNKNOWN
FreeBSDanynoarchja-samba< 3.0.26aUNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%