CVE-2007-4572: Buffer Overflow
Published Nov 16, 2007
·Updated
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.
Affected Software
48 affected components
Samba Samba=3.0.19
Samba Samba=3.0.14a
Samba Samba=3.0.3
Samba Samba=3.0.8
Samba Samba=3.0.25-pre2
Samba Samba=3.0.25b
Samba Samba=3.0.2a
Samba Samba=3.0.5
Samba Samba=3.0.26a
Samba Samba=3.0.6
Samba Samba=3.0.21a
Samba Samba=3.0.25-rc1
Samba Samba=3.0.23
Samba Samba=3.0.4-rc1
Samba Samba=3.0.20a
Samba Samba=3.0.21b
Samba Samba=3.0.0
Samba Samba=3.0.9
Samba Samba=3.0.11
Samba Samba=3.0.7
Samba Samba=3.0.13
Samba Samba=3.0.20b
Samba Samba=3.0.16
Samba Samba=3.0.17
Samba Samba=3.0.21
Samba Samba=3.0.26
Samba Samba=3.0.14
Samba Samba=3.0.25-pre1
Samba Samba=3.0.21c
Samba Samba=3.0.23b
Samba Samba=3.0.25-rc3
Samba Samba=3.0.2
Samba Samba=3.0.12
Samba Samba=3.0.20
Samba Samba=3.0.18
Samba Samba=3.0.25a
Samba Samba=3.0.25c
Samba Samba=3.0.24
Samba Samba=3.0.10
Samba Samba=3.0.23d
Samba Samba=3.0.25-rc2
Samba Samba=3.0.23c
Samba Samba=3.0.15
Samba Samba=3.0.23a
Samba Samba=3.0.4
Samba Samba=3.0.25
Samba Samba=3.0.1
Samba Samba=3.0.22
Remediation
Patch Available
Patch Available
Event History
Nov 16, 2007
CVE Published
06:46 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4572?
CVE-2007-4572 is considered a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-4572?
To mitigate CVE-2007-4572, upgrade Samba to version 3.0.26b or later.
3
What are the affected versions for CVE-2007-4572?
CVE-2007-4572 affects Samba versions from 3.0.0 to 3.0.26a.
4
Can CVE-2007-4572 be exploited remotely?
Yes, CVE-2007-4572 can be exploited remotely via crafted GETDC mailslot requests.
5
What systems are vulnerable to CVE-2007-4572?
Systems running Samba configured as a Primary or Backup Domain Controller are vulnerable to CVE-2007-4572.