NVD

Id
52678  
Name
CVE-2007-0454  
Description
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-02-05  
Modified Date
2011-03-07  
Seq
2007-0454  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266176 52678 CVE-2007-0454 1017588  View
266177 52678 CVE-2007-0454 SSA:2007-038-01  View
266178 52678 CVE-2007-0454 http://us1.samba.org/samba/security/CVE-2007-0454.html  View
266179 52678 CVE-2007-0454 DSA-1257  View
266180 52678 CVE-2007-0454 GLSA-200702-01  View
266181 52678 CVE-2007-0454 VU#649732  View
266182 52678 CVE-2007-0454 MDKSA-2007:034  View
266183 52678 CVE-2007-0454 OpenPKG-SA-2007.012  View
266184 52678 CVE-2007-0454 20070205 [SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin  View
266185 52678 CVE-2007-0454 20070207 rPSA-2007-0026-1 samba samba-swat  View
266186 52678 CVE-2007-0454 22403  View
266187 52678 CVE-2007-0454 2007-0007  View
266188 52678 CVE-2007-0454 USN-419-1  View
266189 52678 CVE-2007-0454 ADV-2007-0483  View
266190 52678 CVE-2007-0454 samba-afsacl-format-string(32304)  View
266191 52678 CVE-2007-0454 https://issues.rpath.com/browse/RPL-1005  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51460 JVNDB-2007-000122 Samba VFS モジュールの afsacl.so ライブラリにおけるフォーマットストリングの脆弱性 Samba の VFS モジュールに含まれる afsacl.so ライブラリには、Windows ACL のマッピングの間に AFS 共有ファイルシステム上のファイル名を適切に処理しないため、フォーマットストリングの脆弱性が存在します。 CVE-2007-0454 23809 CVE-2007-0454 52678 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000122.html 2007-02-05 2007-06-05 View