Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2008-001Upgrade macOS to the latest version | Dec 16, 2011 | Dec 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Dec 13, 2007 |
| Freebsd | — | Upgrade ja-sambaUpgrade sambaUpgrade samba3 | Dec 10, 2025 | Dec 12, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Dec 13, 2007 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest version | Aug 11, 2017 | Dec 13, 2007 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-swatUpgrade samba-client | Oct 16, 2024 | Dec 13, 2007 |
| Suse | — | Upgrade wb-cifs-idmap-pluginUpgrade libsmbsharemodes-develUpgrade libtalloc1-32bitUpgrade libldb-develUpgrade samba-32bitUpgrade samba-ldb-ldapUpgrade python3-ldbUpgrade samba-winbind-32bitUpgrade libwbclient0-32bitUpgrade libwbclient0-x86Upgrade cifs-utils-develUpgrade libtalloc2Upgrade samba-ad-dc-libsUpgrade cifs-mountUpgrade samba-client-langUpgrade samba-dcerpcUpgrade samba-docUpgrade samba-libs-python3Upgrade ldapsmbUpgrade samba-winbind-libsUpgrade libtalloc2-32bitUpgrade libtalloc-develUpgrade libtdb1-32bitUpgrade samba-python3Upgrade libtevent0-x86Upgrade ctdb-pcp-pmdaUpgrade sambaUpgrade samba-x86Upgrade samba-client-libsUpgrade libtdb1Upgrade samba-ad-dcUpgrade libtevent-develUpgrade samba-winbindUpgrade libtalloc2-x86Upgrade samba-gpupdateUpgrade libwbclient-develUpgrade pam_cifscredsUpgrade libnetapi0Upgrade libldb1Upgrade libtalloc1Upgrade samba-client-x86Upgrade samba-clientUpgrade libtevent0Upgrade libtdb1-x86Upgrade libsmbclient0-32bitUpgrade samba-client-32bitUpgrade libtdb-develUpgrade libsmbclient0-x86Upgrade samba-develUpgrade libtalloc1-x86Upgrade samba-toolUpgrade libsmbclient-develUpgrade libldb2Upgrade samba-dsdb-modulesUpgrade samba-krb-printingUpgrade libsmbclient0Upgrade samba-winbind-x86Upgrade samba-winbind-libs-langUpgrade libnetapi-develUpgrade libwbclient0Upgrade libsmbsharemodes0Upgrade samba-testUpgrade samba-libsUpgrade ldb-toolsUpgrade libtevent0-32bitUpgrade ctdbUpgrade cifs-utils | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Nov 8, 2024 | Dec 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub