Published: 06/02/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 up to and including 3.0.23d allows context-dependent malicious users to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba 3.0.14
samba samba 3.0.14a
samba samba 3.0.21c
samba samba 3.0.22
samba samba 3.0.12
samba samba 3.0.13
samba samba 3.0.21a
samba samba 3.0.21b
samba samba 3.0.9
samba samba 3.0.20
samba samba 3.0.20a
samba samba 3.0.23d
samba samba 3.0.6
samba samba 3.0.10
samba samba 3.0.11
samba samba 3.0.20b
samba samba 3.0.21
samba samba 3.0.7
samba samba 3.0.8
debian debian linux 3.0
debian debian linux 3.1
mandrakesoft mandrake linux 2006
mandrakesoft mandrake linux corporate server 3.0
mandrakesoft mandrake linuxsoft 2007
mandrakesoft mandrake linux corporate server 4.0

A flaw was discovered in Samba’s file opening code, which in certain situations could lead to an endless loop, resulting in a denial of service (CVE-2007-0452) ...

CWE-134 http://www.securityfocus.com/bid/22403 http://us1.samba.org/samba/security/CVE-2007-0454.html https://issues.rpath.com/browse/RPL-1005 http://www.debian.org/security/2007/dsa-1257 http://www.gentoo.org/security/en/glsa/glsa-200702-01.xml http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916 http://www.trustix.org/errata/2007/0007 http://www.ubuntu.com/usn/usn-419-1 http://www.kb.cert.org/vuls/id/649732 http://securitytracker.com/id?1017588 http://secunia.com/advisories/24021 http://secunia.com/advisories/24060 http://secunia.com/advisories/24067 http://secunia.com/advisories/24101 http://secunia.com/advisories/24046 http://secunia.com/advisories/24151 http://secunia.com/advisories/24145 http://www.mandriva.com/security/advisories?name=MDKSA-2007:034 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html http://osvdb.org/33101 http://www.vupen.com/english/advisories/2007/0483 https://exchange.xforce.ibmcloud.com/vulnerabilities/32304 http://www.securityfocus.com/archive/1/459365/100/0/threaded http://www.securityfocus.com/archive/1/459179/100/0/threaded https://usn.ubuntu.com/419-1/https://nvd.nist.gov https://www.kb.cert.org/vuls/id/649732

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0454

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect