CVE-2010-3069
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 10%
exploitation probability
10%top 4% of all CVEs
observed exploitation
nono source reports it
Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.
Affected products
n/a · n/aReferences
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttp://marc.info/?l=bugtraq&m=130835366526620&w=2http://secunia.com/advisories/41354http://secunia.com/advisories/41447http://secunia.com/advisories/42531http://secunia.com/advisories/42885