| Package | Affected versions | Patched versions |
|---|---|---|
| samba | = 2.0.1= 2.0.10= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.2.0= 2.2.0a= 2.2.11= 2.2.12= 2.2.1a= 2.2.2= 2.2.3= 2.2.3a= 2.2.4= 2.2.5= 2.2.6= 2.2.7= 2.2.7a= 2.2.8= 2.2.8a= 2.2.9= 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.14a= 3.0.2= 3.0.20= 3.0.20a= 3.0.20b= 3.0.21= 3.0.21a= 3.0.21b= 3.0.21c= 3.0.22= 3.0.23a= 3.0.23b= 3.0.23c= 3.0.23d= 3.0.24= 3.0.25= 3.0.25a= 3.0.25b= 3.0.25c= 3.0.26= 3.0.26a= 3.0.27= 3.0.2a |
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free