CVE-2007-4572

Published: Nov 16, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.

Affected (48)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.0
Samba Samba	Version 3.0.10
Samba Samba	Version 3.0.11
Samba Samba	Version 3.0.12
Samba Samba	Version 3.0.13
Samba Samba	Version 3.0.14
Samba Samba	Version 3.0.14a
Samba Samba	Version 3.0.15
Samba Samba	Version 3.0.16
Samba Samba	Version 3.0.17
Samba Samba	Version 3.0.18
Samba Samba	Version 3.0.19
Samba Samba	Version 3.0.1
Samba Samba	Version 3.0.20
Samba Samba	Version 3.0.20a
Samba Samba	Version 3.0.20b
Samba Samba	Version 3.0.21
Samba Samba	Version 3.0.21a
Samba Samba	Version 3.0.21b
Samba Samba	Version 3.0.21c
Samba Samba	Version 3.0.22
Samba Samba	Version 3.0.23
Samba Samba	Version 3.0.23a
Samba Samba	Version 3.0.23b
Samba Samba	Version 3.0.23c
Samba Samba	Version 3.0.23d
Samba Samba	Version 3.0.24
Samba Samba	Version 3.0.25
Samba Samba	Version 3.0.25 pre1
Samba Samba	Version 3.0.25 pre2
Samba Samba	Version 3.0.25 rc1
Samba Samba	Version 3.0.25 rc2
Samba Samba	Version 3.0.25 rc3
Samba Samba	Version 3.0.25a
Samba Samba	Version 3.0.25b
Samba Samba	Version 3.0.25c
Samba Samba	Version 3.0.26
Samba Samba	Version 3.0.26a
Samba Samba	Version 3.0.2
Samba Samba	Version 3.0.2a
Samba Samba	Version 3.0.3
Samba Samba	Version 3.0.4
Samba Samba	Version 3.0.4 rc1
Samba Samba	Version 3.0.5
Samba Samba	Version 3.0.6
Samba Samba	Version 3.0.7
Samba Samba	Version 3.0.8
Samba Samba	Version 3.0.9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (100)

http://docs.info.apple.com/article.html?artnum=307179

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: secalert@redhat.com

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=120524782005154&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/27450

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/27679

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27682

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27691

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27701

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27720

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27731

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27787

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27927

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28136

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28368

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29341

Source: secalert@redhat.com

http://secunia.com/advisories/30484

Source: secalert@redhat.com

http://secunia.com/advisories/30736

Source: secalert@redhat.com

http://secunia.com/advisories/30835

Source: secalert@redhat.com

http://securitytracker.com/id?1018954

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.447739

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-237764-1

Source: secalert@redhat.com

http://us1.samba.org/samba/security/CVE-2007-4572.html

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2007/dsa-1409

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200711-29.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:224

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_65_samba.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1013.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1016.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-1017.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/485936/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/486859/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26454

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-544-2

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-617-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: secalert@redhat.com

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3869

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/4238

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0064

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0859/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1712/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1908

Source: secalert@redhat.com

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38501

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1894

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11132

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5643

Source: secalert@redhat.com

https://usn.ubuntu.com/544-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00472.html

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=307179