What is CVE-2007-2446?

CVE-2007-2446 is a vulnerability in Samba, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-05-14.

Is CVE-2007-2446 known to be exploited?

10 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Samba

CVE-2007-2446

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (s…

Vulnerability class: Buffer Overflow

EPSS: 0.778 (99.5th percentile) — read the EPSS interpretation.

Affected products

Samba — versions 3.0.0, 3.0.1, 3.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (mailing-list, x_refsource_FULLDISC)
secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (vdb-entry, x_refsource_VUPEN)

Frequently asked questions

What is CVE-2007-2446?: CVE-2007-2446 is a vulnerability in Samba, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-05-14.
Is CVE-2007-2446 known to be exploited?: 10 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.