Back to search
CVE-2007-5398
Published: Nov 16, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
27691
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/secunia_research/2007-90/advisory/
x_refsource_MISC
oval:org.mitre.oval:def:10230
vdb-entry
signature
x_refsource_OVAL
RHSA-2007:1016
vendor-advisory
x_refsource_REDHAT
USN-544-1
vendor-advisory
x_refsource_UBUNTU
ADV-2007-4238
vdb-entry
x_refsource_VUPEN
TA07-352A
third-party-advisory
x_refsource_CERT
30835
third-party-advisory
x_refsource_SECUNIA
29341
third-party-advisory
x_refsource_SECUNIA
SSA:2007-320-01
vendor-advisory
x_refsource_SLACKWARE
HPSBUX02316
vendor-advisory
x_refsource_HP
oval:org.mitre.oval:def:5811
vdb-entry
signature
x_refsource_OVAL
28136
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3869
vdb-entry
x_refsource_VUPEN
27679
third-party-advisory
x_refsource_SECUNIA
27682
third-party-advisory
x_refsource_SECUNIA
27701
third-party-advisory
x_refsource_SECUNIA
1018953
vdb-entry
x_refsource_SECTRACK
RHSA-2007:1013
vendor-advisory
x_refsource_REDHAT
ADV-2008-1908
vdb-entry
x_refsource_VUPEN
27720
third-party-advisory
x_refsource_SECUNIA
27742
third-party-advisory
x_refsource_SECUNIA
SSRT071495
vendor-advisory
x_refsource_HP
HPSBUX02341
vendor-advisory
x_refsource_HP
30484
third-party-advisory
x_refsource_SECUNIA
20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
mailing-list
x_refsource_BUGTRAQ
DSA-1409
vendor-advisory
x_refsource_DEBIAN
27450
third-party-advisory
x_refsource_SECUNIA
27731
third-party-advisory
x_refsource_SECUNIA
SSRT080075
vendor-advisory
x_refsource_HP
APPLE-SA-2007-12-17
vendor-advisory
x_refsource_APPLE
MDKSA-2007:224
vendor-advisory
x_refsource_MANDRIVA
27787
third-party-advisory
x_refsource_SECUNIA
http://docs.info.apple.com/article.html?artnum=307179
x_refsource_CONFIRM
28368
third-party-advisory
x_refsource_SECUNIA
26455
vdb-entry
x_refsource_BID
https://issues.rpath.com/browse/RPL-1894
x_refsource_CONFIRM
GLSA-200711-29
vendor-advisory
x_refsource_GENTOO
20071115 Secunia Research: Samba "reply_netbios_packet()" Buffer OverflowVulnerability
mailing-list
x_refsource_BUGTRAQ
FEDORA-2007-3402
vendor-advisory
x_refsource_FEDORA
27927
third-party-advisory
x_refsource_SECUNIA
ADV-2008-1712
vdb-entry
x_refsource_VUPEN
ADV-2008-0859
vdb-entry
x_refsource_VUPEN
3372
third-party-advisory
x_refsource_SREASON
237764
vendor-advisory
x_refsource_SUNALERT
http://us1.samba.org/samba/security/CVE-2007-5398.html
x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-2008-0001.html
x_refsource_CONFIRM
RHSA-2007:1017
vendor-advisory
x_refsource_REDHAT
ADV-2008-0064
vdb-entry
x_refsource_VUPEN
samba-replynetbiospacket-bo(38502)
vdb-entry
x_refsource_XF
SUSE-SA:2007:065
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now