Description
Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.
References
- 24101 third-party-advisory
- 33098 vdb-entry
- 20070207 rPSA-2007-0026-1 samba samba-swat mailing-list
- OpenPKG-SA-2007.012 vendor-advisory
- samba-winbind-bo(32231) vdb-entry
- 24151 third-party-advisory
- ADV-2007-0483 vdb-entry
- https://issues.rpath.com/browse/RPL-1005
- 1017589 vdb-entry
- 20070205 [SAMBA-SECURITY] CVE-2007-0453: Buffer overrun in nss_winbind.so.1 on Solaris mailing-list
- 22410 vdb-entry
- http://us1.samba.org/samba/security/CVE-2007-0453.html
- 2007-0007 vendor-advisory
- SSA:2007-038-01 vendor-advisory
- 24043 third-party-advisory