NVD

Id
57463  
Name
CVE-2007-5398  
Description
Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-16  
Modified Date
2011-03-07  
Seq
2007-5398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293968 57463 CVE-2007-5398 http://docs.info.apple.com/article.html?artnum=307179  View
293969 57463 CVE-2007-5398 APPLE-SA-2007-12-17  View
293970 57463 CVE-2007-5398 [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
293971 57463 CVE-2007-5398 SSRT071495  View
293972 57463 CVE-2007-5398 oval:org.mitre.oval:def:10230  View
293973 57463 CVE-2007-5398 oval:org.mitre.oval:def:5811  View
293974 57463 CVE-2007-5398 3372  View
293975 57463 CVE-2007-5398 1018953  View
293976 57463 CVE-2007-5398 SSA:2007-320-01  View
293977 57463 CVE-2007-5398 237764  View
293978 57463 CVE-2007-5398 http://us1.samba.org/samba/security/CVE-2007-5398.html  View
293979 57463 CVE-2007-5398 DSA-1409  View
293980 57463 CVE-2007-5398 GLSA-200711-29  View
293981 57463 CVE-2007-5398 MDKSA-2007:224  View
293982 57463 CVE-2007-5398 SUSE-SA:2007:065  View
293983 57463 CVE-2007-5398 RHSA-2007:1013  View
293984 57463 CVE-2007-5398 RHSA-2007:1016  View
293985 57463 CVE-2007-5398 RHSA-2007:1017  View
293986 57463 CVE-2007-5398 20071115 Secunia Research: Samba "reply_netbios_packet()" Buffer OverflowVulnerability  View
293987 57463 CVE-2007-5398 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
293988 57463 CVE-2007-5398 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages  View
293989 57463 CVE-2007-5398 26455  View
293990 57463 CVE-2007-5398 USN-544-1  View
293991 57463 CVE-2007-5398 TA07-352A  View
293992 57463 CVE-2007-5398 http://www.vmware.com/security/advisories/VMSA-2008-0001.html  View
293993 57463 CVE-2007-5398 ADV-2007-3869  View
293994 57463 CVE-2007-5398 ADV-2007-4238  View
293995 57463 CVE-2007-5398 ADV-2008-0064  View
293996 57463 CVE-2007-5398 ADV-2008-0859  View
293997 57463 CVE-2007-5398 ADV-2008-1712  View
293998 57463 CVE-2007-5398 ADV-2008-1908  View
293999 57463 CVE-2007-5398 SSRT080075  View
294000 57463 CVE-2007-5398 samba-replynetbiospacket-bo(38502)  View
294001 57463 CVE-2007-5398 https://issues.rpath.com/browse/RPL-1894  View
294002 57463 CVE-2007-5398 FEDORA-2007-3402  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52297 JVNDB-2007-000987 Samba における WINS Name Registration リクエストに関するバッファオーバーフローの脆弱性 Samba には WINS サーバを構成している場合、nmbd の nmbd/nmbd_packets.c における reply_netbios_packet() 関数において、WINS Name Registration リクエストの処理に不備があり、スタックベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-5398 28753 CVE-2007-5398 57463 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000987.html 2007-11-15 2008-06-19 View