Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Upgrade macOS to the latest versionApply OS X security update 2008-001 | Dec 16, 2011 | Dec 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Dec 13, 2007 |
| Freebsd | — | Upgrade samba3Upgrade sambaUpgrade ja-samba | Dec 10, 2025 | Dec 12, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 13, 2007 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest version | Aug 11, 2017 | Dec 13, 2007 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-swat | Oct 16, 2024 | Dec 13, 2007 |
| Suse | — | Upgrade libldb-develUpgrade samba-libs-python3Upgrade wb-cifs-idmap-pluginUpgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade libtdb1Upgrade python3-ldbUpgrade samba-docUpgrade libwbclient0-x86Upgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libsmbsharemodes-develUpgrade libtevent-develUpgrade samba-x86Upgrade samba-gpupdateUpgrade samba-ad-dc-libsUpgrade samba-ad-dcUpgrade libtalloc2Upgrade libtalloc1-32bitUpgrade samba-python3Upgrade cifs-utils-develUpgrade samba-winbind-libsUpgrade libwbclient0-32bitUpgrade libtalloc-develUpgrade sambaUpgrade samba-32bitUpgrade samba-client-langUpgrade samba-dcerpcUpgrade samba-winbind-32bitUpgrade ldapsmbUpgrade libtdb1-32bitUpgrade libtalloc2-32bitUpgrade samba-winbindUpgrade ctdb-pcp-pmdaUpgrade cifs-mountUpgrade libwbclient-develUpgrade libsmbclient0-x86Upgrade samba-krb-printingUpgrade pam_cifscredsUpgrade cifs-utilsUpgrade libtevent0Upgrade samba-toolUpgrade libtevent0-32bitUpgrade libtdb1-x86Upgrade libsmbclient0-32bitUpgrade libnetapi0Upgrade ldb-toolsUpgrade libnetapi-develUpgrade libsmbsharemodes0Upgrade libwbclient0Upgrade libldb1Upgrade samba-winbind-libs-langUpgrade samba-libsUpgrade samba-develUpgrade ctdbUpgrade samba-winbind-x86Upgrade samba-testUpgrade samba-client-32bitUpgrade libtalloc1-x86Upgrade libsmbclient0Upgrade samba-clientUpgrade libsmbclient-develUpgrade libtdb-develUpgrade samba-dsdb-modulesUpgrade samba-client-x86Upgrade libldb2Upgrade libtalloc1 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Nov 8, 2024 | Dec 13, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub