← back
CVE-2010-2063

CVE-2010-2063

EPSS 78.7%
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16860unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlhttp://marc.info/?l=bugtraq&m=129138831608422&w=2http://marc.info/?l=bugtraq&m=130835366526620&w=2http://marc.info/?l=samba-announce&m=127668712312761&w=2http://osvdb.org/65518http://secunia.com/advisories/40145http://secunia.com/advisories/40210http://secunia.com/advisories/40221http://secunia.com/advisories/40293http://secunia.com/advisories/42319