CVE-2007-0453

Samba 3.0.21-3.0.23d - Buffer Overflow in nss_winbind.so.1 via gethostbyname and getipnodebyname

Title source: llm
STIX 2.1

Description

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

References (15)

Core 15
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24101
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/33098
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/459365/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_openpkg
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/32231
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24151
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0483
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1005
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017589
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/459168/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22410
Various Sources x_refsource_confirm
http://us1.samba.org/samba/security/CVE-2007-0453.html
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2007/0007
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24043

Scores

EPSS 0.0053
EPSS Percentile 67.4%

Details

Status published
Products (10)
samba/samba 3.0.21
samba/samba 3.0.21a
samba/samba 3.0.21b
samba/samba 3.0.21c
samba/samba 3.0.22
samba/samba 3.0.23
samba/samba 3.0.23a
samba/samba 3.0.23b
samba/samba 3.0.23c
samba/samba 3.0.23d
Published Feb 06, 2007
Tracked Since Feb 18, 2026