CVE-2007-5398

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.

🔗 References (102)

• PSIRT-CNA@flexerasoftwarehttp://docs.info.apple.com/article.html?artnum=307179
• PSIRT-CNA@flexerasoftwarehttp://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
• PSIRT-CNA@flexerasoftwarehttp://lists.vmware.com/pipermail/security-announce/2008/000002.html
• PSIRT-CNA@flexerasoftwarehttp://marc.info/?l=bugtraq&m=120524782005154&w=2
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27450
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27679
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27682
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27691
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27701
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27720
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27731
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27742
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27787
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/27927
• PSIRT-CNA@flexerasoftwarehttp://secunia.com/advisories/28136