Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Upgrade macOS to the latest versionApply OS X security update 2008-001 | Dec 16, 2011 | Dec 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Dec 13, 2007 |
| Freebsd | — | Upgrade sambaUpgrade ja-sambaUpgrade samba3 | Dec 10, 2025 | Dec 12, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 13, 2007 |
| Hpux | — | Update CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest version | Aug 11, 2017 | Dec 13, 2007 |
| Oracle_linux | — | Upgrade samba-swatUpgrade samba-clientUpgrade sambaUpgrade samba-common | Oct 16, 2024 | Dec 13, 2007 |
| Suse | — | Upgrade samba-winbind-x86Upgrade libsmbclient0-32bitUpgrade libldb1Upgrade libldb2Upgrade samba-toolUpgrade samba-client-x86Upgrade libtdb-develUpgrade samba-client-32bitUpgrade libsmbclient0-x86Upgrade libnetapi0Upgrade libtalloc1Upgrade libtevent0Upgrade libtdb1-x86Upgrade ldb-toolsUpgrade samba-libsUpgrade ctdbUpgrade libwbclient0Upgrade libsmbclient0Upgrade libtevent0-32bitUpgrade libnetapi-develUpgrade samba-dsdb-modulesUpgrade samba-develUpgrade libsmbclient-develUpgrade libsmbsharemodes0Upgrade libtalloc1-x86Upgrade cifs-utilsUpgrade samba-krb-printingUpgrade samba-winbind-libs-langUpgrade pam_cifscredsUpgrade samba-clientUpgrade samba-testUpgrade samba-32bitUpgrade samba-python3Upgrade python3-ldbUpgrade libwbclient0-x86Upgrade samba-ad-dcUpgrade libtevent0-x86Upgrade libldb-develUpgrade sambaUpgrade libsmbsharemodes-develUpgrade libtalloc2Upgrade samba-ad-dc-libsUpgrade samba-winbind-32bitUpgrade samba-libs-python3Upgrade cifs-utils-develUpgrade samba-ldb-ldapUpgrade libtalloc2-32bitUpgrade libwbclient-develUpgrade cifs-mountUpgrade samba-docUpgrade samba-dcerpcUpgrade libtalloc-develUpgrade libtdb1Upgrade libtdb1-32bitUpgrade libtalloc1-32bitUpgrade samba-winbind-libsUpgrade samba-client-langUpgrade samba-x86Upgrade samba-client-libsUpgrade ldapsmbUpgrade libtevent-develUpgrade wb-cifs-idmap-pluginUpgrade libtalloc2-x86Upgrade ctdb-pcp-pmdaUpgrade libwbclient0-32bitUpgrade samba-winbindUpgrade samba-gpupdate | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Nov 8, 2024 | Dec 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub