Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade ja-sambaUpgrade samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade sambaUpgrade samba-dsdb-modulesUpgrade samba-docUpgrade samba-gpupdateUpgrade samba-32bitUpgrade cifs-utils-develUpgrade libldb2Upgrade libtevent0-32bitUpgrade samba-ad-dc-libsUpgrade samba-winbind-32bitUpgrade cifs-utilsUpgrade samba-client-x86Upgrade libldb1Upgrade libnetapi-develUpgrade samba-develUpgrade libsmbsharemodes0Upgrade ctdbUpgrade samba-testUpgrade libtdb1-x86Upgrade samba-libs-python3Upgrade samba-dcerpcUpgrade libtdb-develUpgrade samba-ad-dcUpgrade samba-winbind-x86Upgrade libnetapi0Upgrade libtalloc2Upgrade wb-cifs-idmap-pluginUpgrade libsmbclient0Upgrade libtalloc2-x86Upgrade samba-winbind-libs-langUpgrade libwbclient-develUpgrade samba-winbindUpgrade libwbclient0-x86Upgrade samba-x86Upgrade samba-ldb-ldapUpgrade libtalloc1-x86Upgrade samba-krb-printingUpgrade samba-toolUpgrade libldb-develUpgrade samba-client-langUpgrade ldb-toolsUpgrade libwbclient0-32bitUpgrade ctdb-pcp-pmdaUpgrade cifs-mountUpgrade samba-client-32bitUpgrade libtevent0Upgrade libtalloc1Upgrade samba-client-libsUpgrade samba-libsUpgrade pam_cifscredsUpgrade libtalloc1-32bitUpgrade libsmbclient0-x86Upgrade samba-clientUpgrade libsmbclient-develUpgrade python3-ldbUpgrade libsmbsharemodes-develUpgrade libtevent0-x86Upgrade libtalloc2-32bitUpgrade libtdb1Upgrade libtdb1-32bitUpgrade libtevent-develUpgrade samba-winbind-libsUpgrade libtalloc-develUpgrade ldapsmbUpgrade libwbclient0Upgrade libsmbclient0-32bitUpgrade samba-python3 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub