CVE-2007-4572

Impact

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://docs.info.apple.com/article.html?artnum=307179
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
• http://lists.vmware.com/pipermail/security-announce/2008/000002.html
• http://marc.info/?l=bugtraq&m=120524782005154&w=2
• http://secunia.com/advisories/27450
• http://secunia.com/advisories/27679
• http://secunia.com/advisories/27682
• http://secunia.com/advisories/27691
• http://secunia.com/advisories/27701
• http://secunia.com/advisories/27720
• http://secunia.com/advisories/27731
• http://secunia.com/advisories/27787
• http://secunia.com/advisories/27927
• http://secunia.com/advisories/28136
• http://secunia.com/advisories/28368
• http://secunia.com/advisories/29341
• http://secunia.com/advisories/30484
• http://secunia.com/advisories/30736
• http://secunia.com/advisories/30835
• http://securitytracker.com/id?1018954
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.447739
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-237764-1
• http://us1.samba.org/samba/security/CVE-2007-4572.html
• http://www.debian.org/security/2007/dsa-1409
• http://www.gentoo.org/security/en/glsa/glsa-200711-29.xml