Description
Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 3.0.27-1 | — |
| Debian 13 | samba | 3.0.27-1 | — |
| Debian 12 | samba | 3.0.27-1 | — |
| Debian 4.0 | samba | 3.0.24-6etch5 | DSA-1409-3, DSA-1409-2, DSA-1409-1 |
| Debian 3.1 | samba | 3.0.14a-3sarge7 | DSA-1409-3, DSA-1409-2, DSA-1409-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | samba +3 | 3.0.25b-1.el5_1.2 | RHSA-2007:1017 |
| RHEL 4 | samba +3 | 3.0.25b-1.el4_6.2 | RHSA-2007:1016 |
| RHEL 3 | samba +3 | 3.0.9-1.3E.14.1 | RHSA-2007:1013 |
| RHEL 2 | samba +3 | 2.2.12-1.21as.8.1 | RHSA-2007:1013 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cifs-utils | 6.13-1.3 | openSUSE-SU-2024:10683-1 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 | openSUSE-SU-2024:11365-1 |
Advisories 8
- RHSA-2007:1017 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:1016 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:1013 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1409-1 samba - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1409-3 samba - several vulnerabilities (update) Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1409-2 samba - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:11365-1 ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10683-1 cifs-utils-6.13-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- USN-544-2 vendor-advisory
- 27691 third-party-advisory
- RHSA-2007:1016 vendor-advisory
- USN-544-1 vendor-advisory
- ADV-2007-4238 vdb-entry
- TA07-352A third-party-advisory
- 30835 third-party-advisory
- 29341 third-party-advisory
- 1018954 vdb-entry
- SSA:2007-320-01 vendor-advisory
- HPSBUX02316 vendor-advisory
- 28136 third-party-advisory
- 30736 third-party-advisory
- ADV-2007-3869 vdb-entry
- 27679 third-party-advisory
- 27682 third-party-advisory
- 27701 third-party-advisory
- RHSA-2007:1013 vendor-advisory
- ADV-2008-1908 vdb-entry
- samba-nmbd-bo(38501) vdb-entry
- 27720 third-party-advisory
- HPSBUX02341 vendor-advisory
- 30484 third-party-advisory
- 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list
- DSA-1409 vendor-advisory
- 27450 third-party-advisory
- 27731 third-party-advisory
- [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list
- oval:org.mitre.oval:def:11132 vdb-entry signature
- APPLE-SA-2007-12-17 vendor-advisory
- MDKSA-2007:224 vendor-advisory
- 27787 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307179
- oval:org.mitre.oval:def:5643 vdb-entry signature
- 28368 third-party-advisory
- https://issues.rpath.com/browse/RPL-1894
- 26454 vdb-entry
- GLSA-200711-29 vendor-advisory
- USN-617-1 vendor-advisory
- FEDORA-2007-3402 vendor-advisory
- 27927 third-party-advisory
- ADV-2008-1712 vdb-entry
- ADV-2008-0859 vdb-entry
- 237764 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0001.html
- http://us1.samba.org/samba/security/CVE-2007-4572.html
- RHSA-2007:1017 vendor-advisory
- ADV-2008-0064 vdb-entry
- SUSE-SA:2007:065 vendor-advisory
- 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages mailing-list