Lucene search
AnonymousZDI-07-032HistoryJul 11, 2007 - 12:00 a.m.
Samba sec_io_acl Heap Overflow Vulnerability
2007-07-1100:00:00
Anonymous
www.zerodayinitiative.com
20
0.963 High
EPSS
Percentile
99.5%
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Samba. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of RPC requests to the SRVSVC RPC interface. When parsing a request to NetSetFileSecurity, heap allocation is calculated based on user input. By specifying invalid values, heap blocks can be overwritten leading to remote code execution.
Related
zdi
zdi
Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability
2007-07-11 00:00:00
Samba lsa_io_trans_names Heap Overflow Vulnerability
2007-07-11 00:00:00
Samba smb_io_notify_option_type_data Heap Overflow Vulnerability
2007-07-11 00:00:00
packetstorm
packetstorm
lsa_transnames_heap-linux.rb.txt
2007-07-26 00:00:00
lsa_transnames_heap-osx.rb.txt
2007-07-26 00:00:00
lsa_transnames_heap-solaris.rb.txt
2007-07-26 00:00:00
saint
saint
Samba lsa_io_trans_names buffer overflow
2007-12-24 00:00:00
Samba lsa_io_trans_names buffer overflow
2007-12-24 00:00:00
Samba lsa_io_trans_names buffer overflow
2007-12-24 00:00:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability
2007-05-16 00:00:00
ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability
2007-05-16 00:00:00
ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability
2007-05-16 00:00:00
nessus
nessus
Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow
2007-05-15 00:00:00
SuSE 10 Security Update : Samba (ZYPP Patch Number 3351)
2007-12-13 00:00:00
openSUSE 10 Security Update : samba (samba-3349)
2007-10-17 00:00:00
canvas
canvas
Immunity Canvas: ASUS_SAMBA
2007-05-14 17:19:00
Immunity Canvas: SOLARIS_SAMBA
2007-05-14 21:19:00
samba
samba
Multiple Heap Overflows Allow Remote
2007-05-14 00:00:00
nvd
nvd
CVE-2007-2446
2007-05-14 21:19:00
cve
cve
CVE-2007-2446
2007-05-14 21:19:00
debiancve
debiancve
CVE-2007-2446
2007-05-14 21:19:00
cert
cert
Samba NDR MS-RPC heap buffer overflow
2007-05-14 00:00:00
prion
prion
Heap overflow
2007-05-14 21:19:00
ubuntucve
ubuntucve
CVE-2007-2446
2007-05-14 00:00:00
openvas
openvas
Samba 3.0.0 <= 3.0.25rc3 Remote Code Execution Vulnerability (CVE-2007-2446)
2021-09-24 00:00:00
HP-UX Update for CIFS Server (Samba) HPSBUX02218
2009-05-05 00:00:00
Debian Security Advisory DSA 1291-2 (samba)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2007-2446
2007-05-14 21:00:00
oraclelinux
oraclelinux
Critical: samba security update
2007-05-14 00:00:00
centos
centos
samba security update
2007-05-14 17:11:04
samba security update
2007-05-14 23:38:47
debian
debian
[SECURITY] [DSA 1291-2] New samba packages fix multiple vulnerabilities
2007-05-17 12:29:25
[SECURITY] [DSA 1291-2] New samba packages fix multiple vulnerabilities
2007-05-17 12:29:25
[SECURITY] [DSA 1291-4] New samba packages fix regression
2007-06-04 19:37:12
redhat
redhat
(RHSA-2007:0354) Critical: samba security update
2007-05-14 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2007-05-15 00:00:00
slackware
slackware
[slackware-security] samba
2007-05-15 03:03:31
fedora
fedora
[SECURITY] Fedora Core 6 Update: samba-3.0.24-5.fc6
2007-05-14 17:22:17
[SECURITY] Fedora Core 5 Update: samba-3.0.24-5.fc5
2007-05-14 17:21:19
ubuntu
ubuntu
Samba vulnerabilities
2007-05-16 00:00:00
suse
suse
remote code execution in samba
2007-05-22 14:13:43
osv
osv
samba
2007-05-15 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2007-05-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package samba version 3.0.25-alt1
2007-05-14 00:00:00
vmware
vmware
seebug
seebug
Mac OS X 2007-007更新修复多个安全漏洞
2007-08-02 00:00:00