CVE-2007-0454: High severity Samba Samba vulnerability
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0454?
CVE-2007-0454 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2007-0454?
To fix CVE-2007-0454, update your Samba installation to a version that is not affected, such as 3.0.24 or later.
Who is affected by CVE-2007-0454?
Users of Samba versions 3.0.6 through 3.0.23d are affected by CVE-2007-0454.
What type of vulnerability is CVE-2007-0454?
CVE-2007-0454 is a format string vulnerability that can lead to arbitrary code execution.
What are the potential impacts of CVE-2007-0454?
The impacts of CVE-2007-0454 can include unauthorized access to system resources and possible compromise of the affected system.