← back
CVE-2007-6015

CVE-2007-6015

EPSS 27.5%
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/4732unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.gentoo.org/show_bug.cgi?id=200773http://docs.info.apple.com/article.html?artnum=307430http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.htmlhttp://lists.vmware.com/pipermail/security-announce/2008/000005.htmlhttp://marc.info/?l=bugtraq&m=120524782005154&w=2http://secunia.com/advisories/27760http://secunia.com/advisories/27894http://secunia.com/advisories/27977http://secunia.com/advisories/27993http://secunia.com/advisories/27999http://secunia.com/advisories/28003http://secunia.com/advisories/28028