CVE-2007-2446
- State
- Published
- Severity
- Not scored
- Published
- May 14, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 2, 2007
Description
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-200705-15vendor-advisory
- 20070515 ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerabilitymailing-list
- 25289third-party-advisory
- 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Playermailing-list
- 20070515 ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerabilitymailing-list
- 20070515 ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerabilitymailing-list
- http://www.samba.org/samba/security/CVE-2007-2446.html
- samba-lsaiotransnames-bo(34316)vdb-entry
- http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
- ADV-2007-2732vdb-entry
- ADV-2007-1805vdb-entry
- ADV-2007-3229vdb-entry
- 25772third-party-advisory
- HPSBUX02218vendor-advisory
- OpenPKG-SA-2007.012vendor-advisory
- 25257third-party-advisory
- 25391third-party-advisory
- 24198vdb-entry
- 20070515 ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerabilitymailing-list
- SUSE-SA:2007:031vendor-advisory
- 25270third-party-advisory
- 20070515 FLEA-2007-0017-1: sambamailing-list
- APPLE-SA-2007-07-31vendor-advisory
- samba-secioacl-bo(34314)vdb-entry
- ADV-2007-2281vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
- ADV-2007-2210vdb-entry
- HPSBTU02218vendor-advisory
- samba-netdfsiodfsenuminfod-bo(34311)vdb-entry
- 2007-0017vendor-advisory
- USN-460-1vendor-advisory
- samba-smbionotifyoptiontypedata-bo(34312)vdb-entry
- 2702third-party-advisory
- 25567third-party-advisory
- 34731vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
- 34699vdb-entry
- 25241third-party-advisory
- 28292third-party-advisory
- MDKSA-2007:104vendor-advisory
- 25256third-party-advisory
- https://issues.rpath.com/browse/RPL-1366
- 25259third-party-advisory
- samba-lsaioprivilegeset-bo(34309)vdb-entry
- SSA:2007-134-01vendor-advisory
- 34732vdb-entry
- 102964vendor-advisory
- 20070513 [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Executionmailing-list
- 1018050vdb-entry
- 23973vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
- 26909third-party-advisory
- ADV-2008-0050vdb-entry
- 27706third-party-advisory
- DSA-1291vendor-advisory
- VU#773720third-party-advisory
- http://docs.info.apple.com/article.html?artnum=306172
- 25232third-party-advisory
- 25251third-party-advisory
- 200588vendor-advisory
- 25246third-party-advisory
- 20070515 ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerabilitymailing-list
- 24197vdb-entry
- 34733vdb-entry
- oval:org.mitre.oval:def:11415vdb-entrysignature
- 25159vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
- 25255third-party-advisory
- 24196vdb-entry
- RHSA-2007:0354vendor-advisory
- 24195vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
- 26235third-party-advisory
- 25675third-party-advisory
- ADV-2007-2079vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.