NVD

Id
40020  
Name
CVE-2013-4408  
Description
Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-10  
Modified Date
2017-01-06  
Seq
2013-4408  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203616 40020 CVE-2013-4408 FEDORA-2014-9132  View
203617 40020 CVE-2013-4408 FEDORA-2014-7672  View
203618 40020 CVE-2013-4408 SUSE-SU-2014:0024  View
203619 40020 CVE-2013-4408 openSUSE-SU-2016:1106  View
203620 40020 CVE-2013-4408 openSUSE-SU-2016:1107  View
203621 40020 CVE-2013-4408 openSUSE-SU-2013:1921  View
203622 40020 CVE-2013-4408 openSUSE-SU-2014:0405  View
203623 40020 CVE-2013-4408 SSRT101413  View
203624 40020 CVE-2013-4408 RHSA-2013:1805  View
203625 40020 CVE-2013-4408 RHSA-2013:1806  View
203626 40020 CVE-2013-4408 RHSA-2014:0009  View
203627 40020 CVE-2013-4408 GLSA-201502-15  View
203628 40020 CVE-2013-4408 DSA-2812  View
203629 40020 CVE-2013-4408 MDVSA-2013:299  View
203630 40020 CVE-2013-4408 http://www.samba.org/samba/ftp/patches/security/samba-4.1.2-CVE-2013-4408-CVE-2012-6150.patch  View
203631 40020 CVE-2013-4408 http://www.samba.org/samba/security/CVE-2013-4408  View
203632 40020 CVE-2013-4408 64191  View
203633 40020 CVE-2013-4408 USN-2054-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23894 JVNDB-2013-005469 Samba の winbindd の librpc/rpc/dcerpc_util.c におけるバッファオーバーフローの脆弱性 Samba の winbindd の librpc/rpc/dcerpc_util.c 内の dcerpc_read_ncacn_packet_done 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-4408 64350 CVE-2013-4408 40020 8.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005469.html 2013-12-09 2014-01-17 View