GoogleOSV:DSA-1590-1samba - arbitrary code execution
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.971 High
EPSS
Percentile
99.7%
Alin Rad Pop discovered that Samba contained a buffer overflow condition
when processing certain responses received while acting as a client,
leading to arbitrary code execution (CVE-2008-1105).
For the stable distribution (etch), this problem has been fixed in version
3.0.24-6etch10.
For the unstable distribution (sid), this problem has been fixed in
version 3.0.30-1.
We recommend that you upgrade your samba packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| samba | eq | 3.0.24-6 | |
| samba | eq | 3.0.24-6etch1 | |
| samba | eq | 3.0.24-6etch2 | |
| samba | eq | 3.0.24-6etch4 | |
| samba | eq | 3.0.24-6etch5 | |
| samba | eq | 3.0.24-6etch6 | |
| samba | eq | 3.0.24-6etch7 | |
| samba | eq | 3.0.24-6etch8 | |
| samba | eq | 3.0.24-6etch9 |
References
Related
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.971 High
EPSS
Percentile
99.7%