CVE-2007-0454
CVE-2007-0454
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
EPSS 6,5% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
samba Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 3.0.23d-5
Mettez à jour vers 3.0.23d-5
samba Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 3.0.23d-5
Mettez à jour vers 3.0.23d-5
samba Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 3.0.23d-5
Mettez à jour vers 3.0.23d-5
Sources originales
- http://www.kb.cert.org/vuls/id/649732
- http://secunia.com/advisories/24046
- http://secunia.com/advisories/24101
- http://www.securityfocus.com/archive/1/459365/100/0/threaded
- http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
- http://securitytracker.com/id?1017588
- http://secunia.com/advisories/24151
- http://www.vupen.com/english/advisories/2007/0483
- http://secunia.com/advisories/24021
- https://issues.rpath.com/browse/RPL-1005
- http://us1.samba.org/samba/security/CVE-2007-0454.html
- http://secunia.com/advisories/24067
- http://osvdb.org/33101
- http://secunia.com/advisories/24145
- http://secunia.com/advisories/24060
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:034
- http://www.securityfocus.com/archive/1/459179/100/0/threaded
- http://www.trustix.org/errata/2007/0007
- http://www.ubuntu.com/usn/usn-419-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32304
- http://www.securityfocus.com/bid/22403
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
- https://nvd.nist.gov/vuln/detail/CVE-2007-0454