suse · CVE-2007-5398

Quick triage

Priority: critical Published: 2021-05-30 12:40:26 UTC Updated: 2026-04-18 20:31:19 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2007-5398 severity critical: SUSE including 277 source package names (cifs-mount-3.4.3-1.17.2, cifs-utils-5.1-0.11.1, …), 277 product×package rows across 10 product lines (SUSE Linux Enterprise Server 11 SP1, SUSE Linux Enterprise Server 11 SP2, … (10 product lines)): Fixed 232, Known Not Affected 45.

Description:

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.

cvelogic Threat Intelligence