Vulnerability in Samba

CVE-2007-0453

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

EPSS: 0.007 (50.2th percentile) — read the EPSS interpretation.

Affected products

  • Samba — versions 3.0.21, 3.0.21a, 3.0.21b
  • N/a — versions n/a

References