| Package | Affected versions | Patched versions |
|---|---|---|
| samba | = 3.0.0= 3.0.1= 3.0.10= 3.0.11= 3.0.12= 3.0.13= 3.0.14= 3.0.14a= 3.0.15= 3.0.16= 3.0.17= 3.0.18= 3.0.19= 3.0.2= 3.0.20= 3.0.20a= 3.0.20b= 3.0.21= 3.0.21a= 3.0.21b= 3.0.21c= 3.0.22= 3.0.23= 3.0.23a= 3.0.23b= 3.0.23c= 3.0.23d= 3.0.24= 3.0.25= 3.0.2a |
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free