Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 3.0.25 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-4138
The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 up to and including 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SF...
Samba Samba 3.0.25Samba Samba 3.0.25aSamba Samba 3.0.25bSamba Samba 3.0.25c
NA
CVE-2007-2446
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 up to and including 3.0.25rc3 allow remote malicious users to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_typ...
Samba Samba 3.0.14Samba Samba 3.0.14aSamba Samba 3.0.20aSamba Samba 3.0.20bSamba Samba 3.0.23aSamba Samba 3.0.23bSamba Samba 3.0.25Samba Samba 3.0.0Samba Samba 3.0.1Samba Samba 3.0.15Samba Samba 3.0.16Samba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.23cSamba Samba 3.0.23dSamba Samba 3.0.2aSamba Samba 3.0.12Samba Samba 3.0.13Samba Samba 3.0.2Samba Samba 3.0.20Samba Samba 3.0.22Samba Samba 3.0.23
NA
CVE-2007-2444
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d up to and including 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
Samba Samba 3.0.25Samba Samba 3.0.24Samba Samba 3.0.23dDebian Debian Linux 5.0Debian Debian Linux 4.0Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 6.06
NA
CVE-2007-2447
The MS-RPC functionality in smbd in Samba 3.0.0 up to and including 3.0.25rc3 allows remote malicious users to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, a...
Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.2Samba Samba 3.0.20Samba Samba 3.0.22Samba Samba 3.0.23Samba Samba 3.0.23aSamba Samba 3.0.25Samba Samba 3.0.6Samba Samba 3.0.7Samba Samba 3.0.0Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20aSamba Samba 3.0.20bSamba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.2aSamba Samba 3.0.8Samba Samba 3.0.9Samba Samba 3.0.11Samba Samba 3.0.12
NA
CVE-2007-4572
Stack-based buffer overflow in nmbd in Samba 3.0.0 up to and including 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote malicious users to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server request...
Samba Samba 3.0.11Samba Samba 3.0.12Samba Samba 3.0.18Samba Samba 3.0.19Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 3.0.26aSamba Samba 3.0.7Samba Samba 3.0.8Samba Samba 3.0.0Samba Samba 3.0.14aSamba Samba 3.0.15Samba Samba 3.0.20bSamba Samba 3.0.21Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.4Samba Samba 3.0.1Samba Samba 3.0.10
NA
CVE-2007-5398
Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 up to and including 3.0.26a, when operating as a WINS server, allows remote malicious users to execute arbitrary code via crafted WINS Name Registration requests followe...
Samba Samba 3.0.1Samba Samba 3.0.10Samba Samba 3.0.16Samba Samba 3.0.17Samba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.21bSamba Samba 3.0.23dSamba Samba 3.0.24Samba Samba 3.0.25aSamba Samba 3.0.25bSamba Samba 3.0.5Samba Samba 3.0.6Samba Samba 3.0.11Samba Samba 3.0.12Samba Samba 3.0.18Samba Samba 3.0.19Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26
NA
CVE-2007-6015
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 up to and including 3.0.27a, when the "domain logons" option is enabled, allows remote malicious users to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string...
Samba Samba 2.0.1Samba Samba 2.0.7Samba Samba 2.0.8Samba Samba 2.2.3Samba Samba 2.2.3aSamba Samba 2.2.8aSamba Samba 2.2.9Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.21bSamba Samba 3.0.21cSamba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 2.0.3Samba Samba 2.0.4Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.6Samba Samba 2.2.7Samba Samba 3.0.1Samba Samba 3.0.10
NA
CVE-2009-2813
Samba 3.4 prior to 3.4.2, 3.3 prior to 3.3.8, 3.2 prior to 3.2.15, and 3.0.12 up to and including 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolvi...
Samba Samba 3.4.1Samba Samba 3.3Samba Samba 3.3.6Samba Samba 3.3.7Samba Samba 3.2.10Samba Samba 3.2.11Samba Samba 3.2.13Samba Samba 3.2.15Samba Samba 3.0.17Samba Samba 3.0.18Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 3.0.31Samba Samba 3.0.32Samba Samba 3.3.2Samba Samba 3.3.3Samba Samba 3.2.2Samba Samba 3.2.7Samba Samba 3.2
NA
CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and previous versions does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.2.3Samba Samba 1.9.18Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5
NA
CVE-2010-1635
The chain_reply function in process.c in smbd in Samba prior to 3.4.8 and 3.5.x prior to 3.5.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a ...
Samba Samba 3.0.19Samba Samba 3.0.14aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 3.2.3Samba Samba 3.3Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5Samba Samba 3.3.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook