CVE-2007-0453

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

🔗 References (30)

• secalert@redhathttp://osvdb.org/33098
• secalert@redhathttp://secunia.com/advisories/24043
• secalert@redhathttp://secunia.com/advisories/24101
• secalert@redhathttp://secunia.com/advisories/24151
• secalert@redhathttp://securitytracker.com/id?1017589
• secalert@redhathttp://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
• secalert@redhathttp://us1.samba.org/samba/security/CVE-2007-0453.html
• secalert@redhathttp://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
• secalert@redhathttp://www.securityfocus.com/archive/1/459168/100/0/threaded
• secalert@redhathttp://www.securityfocus.com/archive/1/459365/100/0/threaded
• secalert@redhathttp://www.securityfocus.com/bid/22410
• secalert@redhathttp://www.trustix.org/errata/2007/0007
• secalert@redhathttp://www.vupen.com/english/advisories/2007/0483
• secalert@redhathttps://exchange.xforce.ibmcloud.com/vulnerabilities/32231
• secalert@redhathttps://issues.rpath.com/browse/RPL-1005