Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade sambaUpgrade ja-samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade samba-swatUpgrade samba | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade libldb1Upgrade samba-winbind-libs-langUpgrade libldb2Upgrade libwbclient0-x86Upgrade samba-ad-dc-libsUpgrade cifs-utils-develUpgrade samba-dcerpcUpgrade libnetapi0Upgrade samba-winbind-32bitUpgrade cifs-utilsUpgrade samba-client-x86Upgrade libtevent0-32bitUpgrade libsmbsharemodes0Upgrade ctdbUpgrade libtdb-develUpgrade samba-winbind-x86Upgrade libnetapi-develUpgrade samba-develUpgrade samba-ad-dcUpgrade samba-docUpgrade libtdb1-x86Upgrade libwbclient-develUpgrade sambaUpgrade samba-libs-python3Upgrade samba-winbindUpgrade samba-gpupdateUpgrade libsmbclient0Upgrade libtalloc2Upgrade samba-dsdb-modulesUpgrade samba-testUpgrade libtalloc2-x86Upgrade wb-cifs-idmap-pluginUpgrade samba-32bitUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libtalloc1-32bitUpgrade samba-toolUpgrade libtevent0Upgrade libsmbsharemodes-develUpgrade libsmbclient0-32bitUpgrade libldb-develUpgrade cifs-mountUpgrade ldb-toolsUpgrade samba-x86Upgrade libsmbclient0-x86Upgrade libwbclient0Upgrade ldapsmbUpgrade libtevent0-x86Upgrade ctdb-pcp-pmdaUpgrade samba-client-langUpgrade libtalloc-develUpgrade samba-winbind-libsUpgrade samba-client-32bitUpgrade python3-ldbUpgrade samba-krb-printingUpgrade libtdb1Upgrade libtalloc2-32bitUpgrade libwbclient0-32bitUpgrade samba-libsUpgrade libsmbclient-develUpgrade libtalloc1-x86Upgrade samba-clientUpgrade libtdb1-32bitUpgrade libtevent-develUpgrade samba-python3Upgrade pam_cifscredsUpgrade libtalloc1 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub