Out-of-Bounds Affecting samba package, versions <3.0.25-1


Severity

Recommended
high

Based on Debian security rating.

Threat Intelligence

Exploit Maturity
Mature
EPSS
96.48% (100th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN10-SAMBA-357780
  • published14 May 2007
  • disclosed14 May 2007

Introduced: 14 May 2007

CVE-2007-2446  (opens in a new tab)
CWE-119  (opens in a new tab)

How to fix?

Upgrade Debian:10 samba to version 3.0.25-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba package and not the samba package as distributed by Debian. See How to fix? for Debian:10 relevant fixed versions and status.

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).

References

CVSS Scores

version 3.1