CVE-2007-6015
- State
- Published
- Severity
- Not scored
- Published
- Dec 13, 2007
- Updated
- Aug 7, 2024
- Reserved
- Nov 19, 2007
Description
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2007:1117vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307430
- [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updatesmailing-list
- 28891third-party-advisory
- 1019295vendor-advisory
- 30835third-party-advisory
- 29341third-party-advisory
- HPSBUX02316vendor-advisory
- VU#438395third-party-advisory
- 26791vdb-entry
- 238251vendor-advisory
- SUSE-SA:2007:068vendor-advisory
- USN-556-1vendor-advisory
- ADV-2008-1908vdb-entry
- ADV-2008-0495vdb-entry
- HPSBUX02341vendor-advisory
- 27999third-party-advisory
- 20071214 POC for samba send_mailslot()mailing-list
- 30484third-party-advisory
- 29032third-party-advisory
- http://www.samba.org/samba/security/CVE-2007-6015.html
- 27993third-party-advisory
- samba-sendmailslot-bo(38965)vdb-entry
- DSA-1427vendor-advisory
- 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updatesmailing-list
- MDKSA-2007:244vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=200773
- 20071210 Secunia Research: Samba "send_mailslot()" Buffer OverflowVulnerabilitymailing-list
- 1019065vdb-entry
- 27977third-party-advisory
- ADV-2008-0637vdb-entry
- 28029third-party-advisory
- ADV-2007-4153vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2007-520.htm
- 28089third-party-advisory
- 28003third-party-advisory
- https://issues.rpath.com/browse/RPL-1976
- TA08-043Bthird-party-advisory
- RHSA-2007:1114vendor-advisory
- 3438third-party-advisory
- SSA:2007-344-01vendor-advisory
- FEDORA-2007-4269vendor-advisory
- FEDORA-2007-4275vendor-advisory
- 27894third-party-advisory
- APPLE-SA-2008-02-11vendor-advisory
- 27760third-party-advisory
- ADV-2008-1712vdb-entry
- http://secunia.com/secunia_research/2007-99/advisory/
- 28067third-party-advisory
- 28037third-party-advisory
- ADV-2008-0859vdb-entry
- 20071210 [SECURITY] Buffer overrun in send_mailslot()mailing-list
- 20071210 rPSA-2007-0261-1 samba samba-swatmailing-list
- oval:org.mitre.oval:def:11572vdb-entrysignature
- 28028third-party-advisory
- oval:org.mitre.oval:def:5605vdb-entrysignature
- GLSA-200712-10vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.