CVE-2007-6015 - Secunia Advisories - Vulnerability Intelligence - Secunia.com

Vulnerability Intelligence

Vulnerability Scanning

Corporate Information

Secunia Advisories

Secunia Research

Binary Analysis

Home > Vulnerability Intelligence > Secunia Advisories > CVE-2007-6015

Secunia Advisories

Advisories by Product

Advisories by Vendor

Historic Advisories

Mailing Lists & RSS

Report Vulnerability

Business Solutions Restricted

Restricted

Partner Solutions Restricted

Restricted

CVE Reference: CVE-2007-6015
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6015

Description: Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38965 UBUNTU http://www.ubuntu.com/usn/usn-556-1 SUSE http://www.novell.com/linux/security/advisories/2007_68_samba.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1 ST 1019065 SREASON http://securityreason.com/securityalert/3438 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.451554 SAID Secunia Advisory: SA28891 Secunia Advisory: SA28089 Secunia Advisory: SA28067 Secunia Advisory: SA28029 Secunia Advisory: SA28028 Secunia Advisory: SA28003 Secunia Advisory: SA27999 Secunia Advisory: SA27993 Secunia Advisory: SA27977 Secunia Advisory: SA27894 Secunia Advisory: SA27760 Secunia Advisory: SA28037 Secunia Advisory: SA29032 Secunia Advisory: SA29341 Secunia Advisory: SA30484 Secunia Advisory: SA30835 REDHAT http://www.redhat.com/support/errata/RHSA-2007-1117.html http://www.redhat.com/support/errata/RHSA-2007-1114.html MLIST http://lists.vmware.com/pipermail/security-announce/2008/000005.html MISC http://secunia.com/secunia_research/2007-99/advisory/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:244 HP http://marc.info/?l=bugtraq&m=120524782005154&w=2 http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657 GENTOO http://security.gentoo.org/glsa/glsa-200712-10.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1427 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm http://docs.info.apple.com/article.html?artnum=307430 http://bugs.gentoo.org/show_bug.cgi?id=200773 http://www.samba.org/samba/security/CVE-2007-6015.html CERT-VN 438395 CERT http://www.us-cert.gov/cas/techalerts/TA08-043B.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/488457/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/485144/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/484825/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/484827/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/484818/100/0/threaded BID 26791 APPLE http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html

Return to the previous page.

Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs | About Secunia
Copyright Secunia 2002-2009