Description
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 3.0.23d-5 | — |
| Debian 13 | samba | 3.0.23d-5 | — |
| Debian 12 | samba | 3.0.23d-5 | — |
| Debian 3.1 | samba | 3.0.14a-3sarge4 | DSA-1257-1 |
Advisories 1
- DSA-1257-1 samba Debian Security (DSA / DLA) · Mar 9, 2026
References
- VU#649732 third-party-advisory
- 24046 third-party-advisory
- 24101 third-party-advisory
- 20070207 rPSA-2007-0026-1 samba samba-swat mailing-list
- GLSA-200702-01 vendor-advisory
- OpenPKG-SA-2007.012 vendor-advisory
- 1017588 vdb-entry
- 24151 third-party-advisory
- ADV-2007-0483 vdb-entry
- 24021 third-party-advisory
- https://issues.rpath.com/browse/RPL-1005
- http://us1.samba.org/samba/security/CVE-2007-0454.html
- 24067 third-party-advisory
- 33101 vdb-entry
- 24145 third-party-advisory
- 24060 third-party-advisory
- MDKSA-2007:034 vendor-advisory
- 20070205 [SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin mailing-list
- 2007-0007 vendor-advisory
- USN-419-1 vendor-advisory
- samba-afsacl-format-string(32304) vdb-entry
- 22403 vdb-entry
- SSA:2007-038-01 vendor-advisory
- DSA-1257 vendor-advisory