ubuntu · CVE-2007-6015

Quick triage

Priority: medium Published: 2007-12-13 21:46:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2007-6015 medium priority: Ubuntu including 1 source packages (samba), 5 status rows across 5 suites (dapper, edgy, feisty, gutsy, upstream): released 5.

Description:

Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

cvelogic Threat Intelligence