English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 76783 CVE descriptions
and 40246 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2007-2446
Description:Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
Test IDs: 1.3.6.1.4.1.25623.1.0.59535   1.3.6.1.4.1.25623.1.0.58343   1.3.6.1.4.1.25623.1.0.58349   1.3.6.1.4.1.25623.1.0.59534  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2007-2446
Bugtraq: 20070513 [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468542/100/0/threaded
Bugtraq: 20070515 FLEA-2007-0017-1: samba (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468670/100/0/threaded
Bugtraq: 20070515 ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468674/100/0/threaded
Bugtraq: 20070515 ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468675/100/0/threaded
Bugtraq: 20070515 ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468673/100/0/threaded
Bugtraq: 20070515 ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468672/100/0/threaded
Bugtraq: 20070515 ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/archive/1/468680/100/0/threaded
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
Debian Security Information: DSA-1291 (Google Search)
http://www.debian.org/security/2007/dsa-1291
http://security.gentoo.org/glsa/glsa-200705-15.xml
HPdes Security Advisory: HPSBUX02218
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
HPdes Security Advisory: SSRT071424
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
HPdes Security Advisory: HPSBTU02218
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
RedHat Security Advisories: RHSA-2007:0354
http://www.redhat.com/support/errata/RHSA-2007-0354.html
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
SuSE Security Announcement: SUSE-SA:2007:031 (Google Search)
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-460-1
CERT/CC vulnerability note: VU#773720
http://www.kb.cert.org/vuls/id/773720
BugTraq ID: 23973
http://www.securityfocus.com/bid/23973
BugTraq ID: 24195
http://www.securityfocus.com/bid/24195
BugTraq ID: 24196
http://www.securityfocus.com/bid/24196
BugTraq ID: 24198
http://www.securityfocus.com/bid/24198
BugTraq ID: 24197
http://www.securityfocus.com/bid/24197
BugTraq ID: 25159
http://www.securityfocus.com/bid/25159
http://osvdb.org/34699
http://osvdb.org/34731
http://osvdb.org/34733
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11415
http://secunia.com/advisories/25391/
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2079
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
http://www.vupen.com/english/advisories/2007/2732
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2008/0050
http://www.osvdb.org/34732
http://www.securitytracker.com/id?1018050
http://secunia.com/advisories/25241
http://secunia.com/advisories/25246
http://secunia.com/advisories/25256
http://secunia.com/advisories/25257
http://secunia.com/advisories/25232
http://secunia.com/advisories/25251
http://secunia.com/advisories/25270
http://secunia.com/advisories/25259
http://secunia.com/advisories/25255
http://secunia.com/advisories/25289
http://secunia.com/advisories/25567
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://secunia.com/advisories/26235
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://secunia.com/advisories/28292
http://securityreason.com/securityalert/2702
XForce ISS Database: samba-lsaioprivilegeset-bo(34309)
http://xforce.iss.net/xforce/xfdb/34309
XForce ISS Database: samba-lsaiotransnames-bo(34316)
http://xforce.iss.net/xforce/xfdb/34316
XForce ISS Database: samba-netdfsiodfsenuminfod-bo(34311)
http://xforce.iss.net/xforce/xfdb/34311
XForce ISS Database: samba-secioacl-bo(34314)
http://xforce.iss.net/xforce/xfdb/34314
XForce ISS Database: samba-smbionotifyoptiontypedata-bo(34312)
http://xforce.iss.net/xforce/xfdb/34312

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe | Whois

© 1998-2014 E-Soft Inc. All rights reserved.