CVE-2007-6015

Publication date 13 December 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

Status

Package Ubuntu Release Status
samba 7.10 gutsy
Fixed 3.0.26a-1ubuntu2.3
7.04 feisty
Fixed 3.0.24-2ubuntu1.5
6.10 edgy
Fixed 3.0.22-1ubuntu4.5
6.06 LTS dapper
Fixed 3.0.22-1ubuntu3.6

References

Related Ubuntu Security Notices (USN)

    • USN-556-1
    • Samba vulnerability
    • 18 December 2007

Other references