CVE-2007-6015
N/A
Published: December 13, 2007 at 09:00 PM UTC
Updated: June 16, 2026 at 10:47 PM UTC
1 product affected across 1 vendorSAMBA
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 27%
Description
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.0.12.0.102.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.2.02.2.0a2.2.112.2.122.2.1a2.2.22.2.32.2.3a2.2.42.2.52.2.62.2.72.2.7a2.2.82.2.8a2.2.93.0.03.0.13.0.103.0.113.0.123.0.133.0.143.0.14a3.0.23.0.203.0.20a3.0.20b3.0.213.0.21a3.0.21b3.0.21c3.0.223.0.23a3.0.23b3.0.23c3.0.23d3.0.243.0.253.0.25 pre13.0.25 pre23.0.25 rc13.0.25 rc23.0.25 rc33.0.25a3.0.25b3.0.25c3.0.263.0.26a3.0.273.0.2a
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (57)
Vendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://lists.vmware.com/pipermail/security-announce/2008/000005.htmlVendor Advisoryx_refsource_HP
Source: [email protected]
http://marc.info/?l=bugtraq&m=120524782005154&w=2Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/27760Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card