CVE-2007-0453 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-0453
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-0453

Description: Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/32231 TRUSTIX http://www.trustix.org/errata/2007/0007 ST 1017589 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916 SAID Secunia Advisory: SA24101 Secunia Advisory: SA24043 Secunia Advisory: SA24151 OSVDB 33098 OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html CONFIRM http://us1.samba.org/samba/security/CVE-2007-0453.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/459365/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/459168/100/0/threaded BID 22410

Return to the previous page.