NVD

Id
54613  
Name
CVE-2007-2446  
Description
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-14  
Modified Date
2012-10-30  
Seq
2007-2446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277083 54613 CVE-2007-2446 http://docs.info.apple.com/article.html?artnum=306172  View
277084 54613 CVE-2007-2446 HPSBUX02218  View
277085 54613 CVE-2007-2446 HPSBTU02218  View
277086 54613 CVE-2007-2446 APPLE-SA-2007-07-31  View
277087 54613 CVE-2007-2446 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
277088 54613 CVE-2007-2446 SUSE-SA:2007:031  View
277089 54613 CVE-2007-2446 oval:org.mitre.oval:def:11415  View
277090 54613 CVE-2007-2446 GLSA-200705-15  View
277091 54613 CVE-2007-2446 2702  View
277092 54613 CVE-2007-2446 SSA:2007-134-01  View
277093 54613 CVE-2007-2446 102964  View
277094 54613 CVE-2007-2446 200588  View
277095 54613 CVE-2007-2446 DSA-1291  View
277096 54613 CVE-2007-2446 VU#773720  View
277097 54613 CVE-2007-2446 MDKSA-2007:104  View
277098 54613 CVE-2007-2446 OpenPKG-SA-2007.012  View
277099 54613 CVE-2007-2446 RHSA-2007:0354  View
277100 54613 CVE-2007-2446 http://www.samba.org/samba/security/CVE-2007-2446.html  View
277101 54613 CVE-2007-2446 20070513 [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution  View
277102 54613 CVE-2007-2446 20070515 FLEA-2007-0017-1: samba  View
277103 54613 CVE-2007-2446 20070515 ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability  View
277104 54613 CVE-2007-2446 20070515 ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability  View
277105 54613 CVE-2007-2446 20070515 ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability  View
277106 54613 CVE-2007-2446 20070515 ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability  View
277107 54613 CVE-2007-2446 20070515 ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability  View
277108 54613 CVE-2007-2446 23973  View
277109 54613 CVE-2007-2446 24195  View
277110 54613 CVE-2007-2446 24196  View
277111 54613 CVE-2007-2446 24197  View
277112 54613 CVE-2007-2446 24198  View
277113 54613 CVE-2007-2446 25159  View
277114 54613 CVE-2007-2446 1018050  View
277115 54613 CVE-2007-2446 2007-0017  View
277116 54613 CVE-2007-2446 USN-460-1  View
277117 54613 CVE-2007-2446 ADV-2007-1805  View
277118 54613 CVE-2007-2446 ADV-2007-2079  View
277119 54613 CVE-2007-2446 ADV-2007-2210  View
277120 54613 CVE-2007-2446 ADV-2007-2281  View
277121 54613 CVE-2007-2446 ADV-2007-2732  View
277122 54613 CVE-2007-2446 ADV-2007-3229  View
277123 54613 CVE-2007-2446 ADV-2008-0050  View
277124 54613 CVE-2007-2446 http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf  View
277125 54613 CVE-2007-2446 http://www.zerodayinitiative.com/advisories/ZDI-07-029.html  View
277126 54613 CVE-2007-2446 http://www.zerodayinitiative.com/advisories/ZDI-07-030.html  View
277127 54613 CVE-2007-2446 http://www.zerodayinitiative.com/advisories/ZDI-07-031.html  View
277128 54613 CVE-2007-2446 http://www.zerodayinitiative.com/advisories/ZDI-07-032.html  View
277129 54613 CVE-2007-2446 http://www.zerodayinitiative.com/advisories/ZDI-07-033.html  View
277130 54613 CVE-2007-2446 samba-lsaioprivilegeset-bo(34309)  View
277131 54613 CVE-2007-2446 samba-netdfsiodfsenuminfod-bo(34311)  View
277132 54613 CVE-2007-2446 samba-smbionotifyoptiontypedata-bo(34312)  View
277133 54613 CVE-2007-2446 samba-secioacl-bo(34314)  View
277134 54613 CVE-2007-2446 samba-lsaiotransnames-bo(34316)  View
277135 54613 CVE-2007-2446 https://issues.rpath.com/browse/RPL-1366  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51710 JVNDB-2007-000373 Samba NDR MS-RPC におけるバッファオーバーフローの脆弱性 Samba には細工された MS-RPC パケットの取り扱いに問題があり、バッファオーバーフローの脆弱性が存在します。 CVE-2007-2446 25801 CVE-2007-2446 54613 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000373.html 2007-05-14 2007-07-30 View