{"id":"CVE-2007-4572","aliases":["DEBIAN-CVE-2007-4572","DSA-1409-1","DSA-1409-2","DSA-1409-3","EUVD-2007-4554","GHSA-c889-7vh4-j454","RHSA-2007:1013","RHSA-2007:1016","RHSA-2007:1017","openSUSE-SU-2024:10683-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary...","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05888,"percentile":0.93269,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2007-11-16T18:00:00Z","modified":"2026-10-21T17:47:36Z","fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["3.0.27-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["3.0.27-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["3.0.27-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.27-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.27-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.27-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-6etch5"}]}],"versions":["3.0.24-6","3.0.24-6etch1","3.0.24-6etch2","3.0.24-6etch4"],"bundled":2},{"source":"osv","ecosystem":"Debian:3.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.14a-3sarge7"}]}],"versions":["3.0.14a-3","3.0.14a-3sarge1","3.0.14a-3sarge2","3.0.14a-3sarge3","3.0.14a-3sarge4","3.0.14a-3sarge6"],"bundled":2},{"source":"osv","ecosystem":"Debian:4.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-6etch7"}]}],"versions":["3.0.24-6","3.0.24-6etch1","3.0.24-6etch2","3.0.24-6etch4","3.0.24-6etch5","3.0.24-6etch6"],"bundled":2},{"source":"osv","ecosystem":"Debian:3.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.14a-3sarge9"}]}],"versions":["3.0.14a-3","3.0.14a-3sarge1","3.0.14a-3sarge2","3.0.14a-3sarge3","3.0.14a-3sarge4","3.0.14a-3sarge6","3.0.14a-3sarge7","3.0.14a-3sarge8"],"bundled":2},{"source":"osv","ecosystem":"Debian:4.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-6etch8"}]}],"versions":["3.0.24-6","3.0.24-6etch1","3.0.24-6etch2","3.0.24-6etch4","3.0.24-6etch5","3.0.24-6etch6","3.0.24-6etch7"],"bundled":2},{"source":"osv","ecosystem":"Debian:3.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.14a-3sarge10"}]}],"versions":["3.0.14a-3","3.0.14a-3sarge1","3.0.14a-3sarge2","3.0.14a-3sarge3","3.0.14a-3sarge4","3.0.14a-3sarge6","3.0.14a-3sarge7","3.0.14a-3sarge8","3.0.14a-3sarge9"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el4_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.25b-1.el5_1.2"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-1.3"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://www.ubuntu.com/usn/usn-544-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27691","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1016.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://usn.ubuntu.com/544-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/4238","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-352A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource","web"]},{"url":"http://secunia.com/advisories/30835","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/29341","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://securitytracker.com/id?1018954","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.447739","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=120524782005154\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://secunia.com/advisories/28136","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/30736","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3869","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27679","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/27682","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/27701","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1013.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/1908","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38501","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/27720","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://secunia.com/advisories/30484","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.debian.org/security/2007/dsa-1409","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27450","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/27731","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11132","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:224","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27787","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=307179","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5643","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://secunia.com/advisories/28368","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://issues.rpath.com/browse/RPL-1894","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/26454","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200711-29.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-617-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00472.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/27927","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1712/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0859/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-237764-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://us1.samba.org/samba/security/CVE-2007-4572.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1017.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2008/0064","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2007_65_samba.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4572","tags":["advisory"]},{"url":"https://usn.ubuntu.com/544-1"},{"url":"https://github.com/advisories/GHSA-c889-7vh4-j454"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-4572","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:1013","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=294631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=358831","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1013.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4572","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-5398","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5398","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5398","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:1016","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=286271","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1016.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-4138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4138","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:1017","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1017.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2007-4572","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2007-11-16T18:00:00Z","modified":"2024-08-07T15:01:09.547Z","updated_at":"2026-11-02T13:33:19.093583Z"}],"euvd":[{"id":"EUVD-2007-4554","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2007-11-16T18:00:00Z","modified":"2024-08-07T15:01:09Z","updated_at":"2026-11-03T01:16:21.106382Z"}],"ghsa":[{"id":"GHSA-c889-7vh4-j454","title":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary...","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2022-05-01T18:25:07Z","modified":"2025-04-09T03:48:32Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:00:55.503486Z"}],"nvd":[{"id":"CVE-2007-4572","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2007-11-16T18:46:00Z","modified":"2026-06-16T22:44:21.287Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:23.208914Z"}],"osv":[{"id":"CVE-2007-4572","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2007-11-16T18:46:00Z","modified":"2026-04-10T03:39:11.7948Z","updated_at":"2026-11-02T15:43:57.178433Z"},{"id":"DEBIAN-CVE-2007-4572","description":"Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests.","status":"published","published":"2007-11-16T18:46:00Z","modified":"2026-10-21T17:47:36.342916636Z","updated_at":"2026-11-02T15:45:23.411908Z"},{"id":"DSA-1409-1","title":"samba - several vulnerabilities","status":"published","published":"2007-11-22T00:00:00Z","modified":"2026-03-09T01:01:04.09018Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1409-2","title":"samba - several vulnerabilities","status":"published","published":"2007-11-22T00:00:00Z","modified":"2026-03-09T01:00:41.732937Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1409-3","title":"samba - several vulnerabilities (update)","status":"published","published":"2007-11-22T00:00:00Z","modified":"2026-03-09T01:01:00.192372Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"openSUSE-SU-2024:10683-1","title":"cifs-utils-6.13-1.3 on GA media","description":"These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:27:26.032876Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"RHSA-2007:1013","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-15T17:00:32Z","modified":"2026-06-26T10:07:40Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2007:1016","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-15T17:00:37Z","modified":"2026-06-26T10:07:41Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2007:1017","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-15T17:00:41Z","modified":"2026-06-26T10:07:42Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}