Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade sambaUpgrade ja-samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade libsmbsharemodes0Upgrade wb-cifs-idmap-pluginUpgrade samba-docUpgrade samba-winbind-libs-langUpgrade libtalloc2Upgrade samba-winbind-32bitUpgrade libwbclient0-x86Upgrade libldb1Upgrade samba-dcerpcUpgrade libtdb-develUpgrade samba-dsdb-modulesUpgrade libldb2Upgrade sambaUpgrade samba-ad-dcUpgrade samba-ad-dc-libsUpgrade cifs-utils-develUpgrade libwbclient-develUpgrade samba-client-x86Upgrade samba-testUpgrade libnetapi0Upgrade samba-32bitUpgrade samba-winbind-x86Upgrade ctdbUpgrade samba-gpupdateUpgrade samba-develUpgrade samba-libs-python3Upgrade libnetapi-develUpgrade samba-winbindUpgrade libtevent0-32bitUpgrade libsmbclient0Upgrade libtalloc2-x86Upgrade libtdb1-x86Upgrade cifs-utilsUpgrade libtevent0-x86Upgrade libsmbclient-develUpgrade libsmbsharemodes-develUpgrade pam_cifscredsUpgrade libsmbclient0-32bitUpgrade samba-winbind-libsUpgrade cifs-mountUpgrade ldb-toolsUpgrade python3-ldbUpgrade libtalloc1-32bitUpgrade samba-krb-printingUpgrade libwbclient0Upgrade libtalloc-develUpgrade libtevent0Upgrade samba-client-32bitUpgrade samba-libsUpgrade libtevent-develUpgrade samba-client-libsUpgrade samba-x86Upgrade ctdb-pcp-pmdaUpgrade ldapsmbUpgrade samba-client-langUpgrade samba-clientUpgrade libtdb1-32bitUpgrade libtalloc1Upgrade libtdb1Upgrade libldb-develUpgrade libtalloc2-32bitUpgrade libsmbclient0-x86Upgrade samba-python3Upgrade libwbclient0-32bitUpgrade samba-toolUpgrade libtalloc1-x86Upgrade samba-ldb-ldap | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub