CVE-2007-6015
CVE-2007-6015
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
EPSS 27.5% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.redhat.com/support/errata/RHSA-2007-1117.html
- http://docs.info.apple.com/article.html?artnum=307430
- http://lists.vmware.com/pipermail/security-announce/2008/000005.html
- http://secunia.com/advisories/28891
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019295.1-1
- http://secunia.com/advisories/30835
- http://secunia.com/advisories/29341
- http://marc.info/?l=bugtraq&m=120524782005154&w=2
- http://www.kb.cert.org/vuls/id/438395
- http://www.securityfocus.com/bid/26791
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238251-1
- http://www.novell.com/linux/security/advisories/2007_68_samba.html
- http://www.ubuntu.com/usn/usn-556-1
- http://www.vupen.com/english/advisories/2008/1908
- http://www.vupen.com/english/advisories/2008/0495/references
- http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657
- http://secunia.com/advisories/27999
- http://www.securityfocus.com/archive/1/485144/100/0/threaded
- http://secunia.com/advisories/30484
- http://secunia.com/advisories/29032
- http://www.samba.org/samba/security/CVE-2007-6015.html
- http://secunia.com/advisories/27993
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38965
- https://nvd.nist.gov/vuln/detail/CVE-2007-6015