Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-6015

high · 9.3

Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

9.3
CVSS
27.5%
EPSS (exploit prob.)
98th
EPSS percentile
2007-12-13
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
sambasamba2.0.1
sambasamba2.0.2
sambasamba2.0.3
sambasamba2.0.4
sambasamba2.0.5
sambasamba2.0.6
sambasamba2.0.7
sambasamba2.0.8
sambasamba2.0.9
sambasamba2.0.10
sambasamba2.2.0
sambasamba2.2.0a
sambasamba2.2.1a
sambasamba2.2.2
sambasamba2.2.3
sambasamba2.2.3a
sambasamba2.2.4
sambasamba2.2.5
sambasamba2.2.6
sambasamba2.2.7
sambasamba2.2.7a
sambasamba2.2.8
sambasamba2.2.8a
sambasamba2.2.9
sambasamba2.2.11
sambasamba2.2.12
sambasamba3.0.0
sambasamba3.0.1
sambasamba3.0.2
sambasamba3.0.2a
sambasamba3.0.10
sambasamba3.0.11
sambasamba3.0.12
sambasamba3.0.13
sambasamba3.0.14
sambasamba3.0.14a
sambasamba3.0.20
sambasamba3.0.20a
sambasamba3.0.20b
sambasamba3.0.21

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-6015