Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4572
HistoryNov 16, 2007 - 12:00 a.m.

CVE-2007-4572

2007-11-1600:00:00
ubuntu.com
ubuntu.com
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.059 Low

EPSS

Percentile

93.4%

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when
configured as a Primary or Backup Domain controller, allows remote
attackers to have an unknown impact via crafted GETDC mailslot requests,
related to handling of GETDC logon server requests.

Notes

Author Note
jdstrand believed by upstream to be unexploitable Debian 3.0.24-6etch8 should be regression free (check earlier versions too) suse has most complete fix
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsamba<Β 3.0.22-1ubuntu3.7UNKNOWN
ubuntu7.04noarchsamba<Β 3.0.24-2ubuntu1.6UNKNOWN
ubuntu7.10noarchsamba<Β 3.0.26a-1ubuntu2.4UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.059 Low

EPSS

Percentile

93.4%