Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade ja-sambaUpgrade samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade libsmbsharemodes-develUpgrade ctdb-pcp-pmdaUpgrade libtalloc2-32bitUpgrade libtalloc-develUpgrade libtdb1Upgrade libsmbclient0-32bitUpgrade libsmbclient0-x86Upgrade libwbclient0Upgrade libwbclient0-32bitUpgrade libtalloc1-32bitUpgrade samba-libsUpgrade ldb-toolsUpgrade samba-x86Upgrade samba-python3Upgrade samba-clientUpgrade samba-winbind-libsUpgrade samba-client-libsUpgrade libtevent0-x86Upgrade libtevent0Upgrade ldapsmbUpgrade samba-client-32bitUpgrade samba-client-langUpgrade cifs-mountUpgrade samba-toolUpgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade libtalloc1Upgrade libtalloc1-x86Upgrade libsmbclient-develUpgrade pam_cifscredsUpgrade libldb-develUpgrade libtevent-develUpgrade samba-ldb-ldapUpgrade python3-ldbUpgrade samba-winbind-x86Upgrade libnetapi-develUpgrade libsmbclient0Upgrade samba-docUpgrade wb-cifs-idmap-pluginUpgrade samba-winbind-libs-langUpgrade sambaUpgrade cifs-utils-develUpgrade libtdb1-x86Upgrade cifs-utilsUpgrade libsmbsharemodes0Upgrade samba-develUpgrade samba-ad-dcUpgrade samba-dcerpcUpgrade libnetapi0Upgrade libldb2Upgrade samba-winbind-32bitUpgrade libwbclient0-x86Upgrade libtdb-develUpgrade samba-testUpgrade libtevent0-32bitUpgrade libtalloc2Upgrade samba-dsdb-modulesUpgrade samba-winbindUpgrade libwbclient-develUpgrade libldb1Upgrade samba-ad-dc-libsUpgrade samba-client-x86Upgrade samba-libs-python3Upgrade ctdbUpgrade samba-gpupdateUpgrade libtalloc2-x86Upgrade samba-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub