CVE-2007-5398

Published: Nov 16, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.

Affected (48)

Products: Samba: Samba

Samba

1 product

Samba

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.0.0
Samba Samba	Version 3.0.10
Samba Samba	Version 3.0.11
Samba Samba	Version 3.0.12
Samba Samba	Version 3.0.13
Samba Samba	Version 3.0.14
Samba Samba	Version 3.0.14a
Samba Samba	Version 3.0.15
Samba Samba	Version 3.0.16
Samba Samba	Version 3.0.17
Samba Samba	Version 3.0.18
Samba Samba	Version 3.0.19
Samba Samba	Version 3.0.1
Samba Samba	Version 3.0.20
Samba Samba	Version 3.0.20a
Samba Samba	Version 3.0.20b
Samba Samba	Version 3.0.21
Samba Samba	Version 3.0.21a
Samba Samba	Version 3.0.21b
Samba Samba	Version 3.0.21c
Samba Samba	Version 3.0.22
Samba Samba	Version 3.0.23
Samba Samba	Version 3.0.23a
Samba Samba	Version 3.0.23b
Samba Samba	Version 3.0.23c
Samba Samba	Version 3.0.23d
Samba Samba	Version 3.0.24
Samba Samba	Version 3.0.25
Samba Samba	Version 3.0.25 pre1
Samba Samba	Version 3.0.25 pre2
Samba Samba	Version 3.0.25 rc1
Samba Samba	Version 3.0.25 rc2
Samba Samba	Version 3.0.25 rc3
Samba Samba	Version 3.0.25a
Samba Samba	Version 3.0.25b
Samba Samba	Version 3.0.25c
Samba Samba	Version 3.0.26
Samba Samba	Version 3.0.26a
Samba Samba	Version 3.0.2
Samba Samba	Version 3.0.2a
Samba Samba	Version 3.0.3
Samba Samba	Version 3.0.4
Samba Samba	Version 3.0.4 rc1
Samba Samba	Version 3.0.5
Samba Samba	Version 3.0.6
Samba Samba	Version 3.0.7
Samba Samba	Version 3.0.8
Samba Samba	Version 3.0.9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (102)

http://docs.info.apple.com/article.html?artnum=307179

Source: PSIRT-CNA@flexerasoftware.com

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: PSIRT-CNA@flexerasoftware.com

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

Source: PSIRT-CNA@flexerasoftware.com

http://marc.info/?l=bugtraq&m=120524782005154&w=2

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27450

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27679

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27682

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27691

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27701

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27720

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27731

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27742

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27787

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27927

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/28136

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/28368

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/29341

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/30484

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/30835

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2007-90/advisory/

Source: PSIRT-CNA@flexerasoftware.com

http://securityreason.com/securityalert/3372

Source: PSIRT-CNA@flexerasoftware.com

http://securitytracker.com/id?1018953

Source: PSIRT-CNA@flexerasoftware.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.447739

Source: PSIRT-CNA@flexerasoftware.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-237764-1

Source: PSIRT-CNA@flexerasoftware.com

http://us1.samba.org/samba/security/CVE-2007-5398.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2007/dsa-1409

Source: PSIRT-CNA@flexerasoftware.com

http://www.gentoo.org/security/en/glsa/glsa-200711-29.xml

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:224

Source: PSIRT-CNA@flexerasoftware.com

http://www.novell.com/linux/security/advisories/2007_65_samba.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1013.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1016.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1017.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/483744/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/485936/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/486859/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/26455

Source: PSIRT-CNA@flexerasoftware.com

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3869

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/4238

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/0064

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/0859/references

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/1712/references

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/1908

Source: PSIRT-CNA@flexerasoftware.com

http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38502

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-1894

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10230

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5811

Source: PSIRT-CNA@flexerasoftware.com

https://usn.ubuntu.com/544-1/

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00472.html

Source: PSIRT-CNA@flexerasoftware.com

http://docs.info.apple.com/article.html?artnum=307179