Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-544-1
HistoryNov 16, 2007 - 12:00 a.m.

Samba vulnerabilities

2007-11-1600:00:00
ubuntu.com
39

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

JSON

Releases

  • Ubuntu 7.10
  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • samba -

Details

Samba developers discovered that nmbd could be made to overrun a buffer
during the processing of GETDC logon server requests. When samba is
configured as a Primary or Backup Domain Controller, a remote attacker
could send malicious logon requests and possibly cause a denial of
service. (CVE-2007-4572)

Alin Rad Pop of Secunia Research discovered that nmbd did not properly
check the length of netbios packets. When samba is configured as a WINS
server, a remote attacker could send multiple crafted requests resulting
in the execution of arbitrary code with root privileges. (CVE-2007-5398)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchsamba< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibpam-smbpass< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibsmbclient< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchlibsmbclient-dev< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchsamba-common< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchsamba-dbg< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchsmbclient< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchsmbfs< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchswat< 3.0.26a-1ubuntu2.1UNKNOWN
Ubuntu7.10noarchwinbind< 3.0.26a-1ubuntu2.1UNKNOWN
Rows per page:
1-10 of 431

Related

openvas 81
debian 3
fedora 6
osv 3
nessus 33
gentoo 1
oraclelinux 4
redhat 5
freebsd 1
ubuntu 3
securityvulns 5
suse 1
centos 5
slackware 1
debiancve 2
ubuntucve 2
prion 2
veracode 2
checkpoint_advisories 1
seebug 2
samba 2
cve 2
altlinux 1
vmware 2
openvas
openvas
Ubuntu Update for samba regression USN-544-2
2009-03-23 00:00:00
Mandriva Update for samba MDKSA-2007:224 (samba)
2009-04-09 00:00:00
FreeBSD Ports: samba, samba3, ja-samba
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities
2007-11-22 20:51:40
[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities
2007-11-29 14:28:19
[SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities
2007-11-26 14:53:41
fedora
fedora
[SECURITY] Fedora 7 Update: samba-3.0.27-0.fc7
2007-11-16 00:36:50
[SECURITY] Fedora Core 6 Update: samba-3.0.24-8.fc6
2007-11-21 23:01:25
[SECURITY] Fedora 8 Update: samba-3.0.27-0.fc8
2007-11-16 14:39:42
osv
osv
samba - several vulnerabilities (update)
2007-11-29 00:00:00
samba - several vulnerabilities
2007-11-29 00:00:00
samba - several vulnerabilities
2007-11-29 00:00:00
nessus
nessus
RHEL 2.1 / 3 : samba (RHSA-2007:1013)
2007-11-16 00:00:00
Oracle Linux 3 : samba (ELSA-2007-1013)
2013-07-12 00:00:00
Fedora 7 : samba-3.0.27-0.fc7 (2007-3402)
2007-11-16 00:00:00
gentoo
gentoo
Samba: Execution of arbitrary code
2007-11-20 00:00:00
oraclelinux
oraclelinux
Critical: samba security update
2007-11-16 00:00:00
Critical: samba security update
2007-12-04 00:00:00
Critical: samba security update
2007-11-23 00:00:00
redhat
redhat
(RHSA-2007:1013) Critical: samba security update
2007-11-15 00:00:00
(RHSA-2007:1017) Critical: samba security update
2007-11-15 00:00:00
(RHSA-2007:1016) Critical: samba security update
2007-11-15 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2007-11-15 00:00:00
ubuntu
ubuntu
Samba regression
2007-11-16 00:00:00
Samba vulnerabilities
2008-06-17 00:00:00
Samba regression
2008-06-30 00:00:00
securityvulns
securityvulns
Samba multiple security vulnerabilities
2007-11-16 00:00:00
Secunia Research: Samba &quot;reply_netbios_packet&#40;&#41;&quot; Buffer Overflow Vulnerability
2007-11-16 00:00:00
[SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd
2007-11-16 00:00:00
suse
suse
remote code execution in samba
2007-12-05 16:05:59
centos
centos
samba security update
2007-11-15 23:26:10
samba security update
2007-11-15 19:31:12
samba security update
2007-11-15 18:56:31
slackware
slackware
[slackware-security] samba
2007-11-17 01:28:32
debiancve
debiancve
CVE-2007-4572
2007-11-16 18:46:00
CVE-2007-5398
2007-11-16 18:46:00
ubuntucve
ubuntucve
CVE-2007-4572
2007-11-16 00:00:00
CVE-2007-5398
2007-11-16 00:00:00
prion
prion
Stack overflow
2007-11-16 18:46:00
Stack overflow
2007-11-16 18:46:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:17:30
Arbitrary Code Execution
2020-04-10 00:17:29
checkpoint_advisories
checkpoint_advisories
Samba WINS Server Name Registration Handling Stack Buffer Overflow (CVE-2007-5398)
2010-10-28 00:00:00
seebug
seebug
Samba NMBD登录请求远程溢出漏洞
2007-11-17 00:00:00
Samba nmbd_packets.c NetBIOS回复栈溢出漏洞
2007-11-17 00:00:00
samba
samba
Stack buffer overflow in nmbd's logon
2007-11-15 00:00:00
Remote code execution in Samba's WINS
2007-11-15 00:00:00
cve
cve
CVE-2007-4572
2007-11-16 18:46:00
CVE-2007-5398
2007-11-16 18:46:00
altlinux
altlinux
Security fix for the ALT Linux 5 package samba version 3.0.27-alt1
2007-11-15 00:00:00
vmware
vmware
Updated service console patches.
2008-01-07 00:00:00
Updated service console patches.
2008-01-07 00:00:00

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.96 High

EPSS

Percentile

99.5%

JSON
Related for USN-544-1
openvas81debian3fedora6osv3nessus33gentoo1oraclelinux4redhat5freebsd1ubuntu3securityvulns5suse1centos5slackware1debiancve2ubuntucve2prion2veracode2checkpoint_advisories1seebug2samba2cve2altlinux1vmware2