Total vulnerabilities in the database
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
| Software | From | Fixed in |
|---|---|---|
| samba / samba | 3.0.14a | 3.0.14a.x |
| samba / samba | 2.2.1a | 2.2.1a.x |
| samba / samba | 3.0.27 | 3.0.27.x |
| samba / samba | 2.0.10 | 2.0.10.x |
| samba / samba | 2.2.12 | 2.2.12.x |
| samba / samba | 3.0.25-pre2 | 3.0.25-pre2.x |
| samba / samba | 2.0.1 | 2.0.1.x |
| samba / samba | 3.0.25b | 3.0.25b.x |
| samba / samba | 2.2.3a | 2.2.3a.x |
| samba / samba | 2.0.2 | 2.0.2.x |
| samba / samba | 3.0.2a | 3.0.2a.x |
| samba / samba | 2.2.8a | 2.2.8a.x |
| samba / samba | 3.0.26a | 3.0.26a.x |
| samba / samba | 3.0.21a | 3.0.21a.x |
| samba / samba | 3.0.25-rc1 | 3.0.25-rc1.x |
| samba / samba | 3.0.20a | 3.0.20a.x |
| samba / samba | 2.2.9 | 2.2.9.x |
| samba / samba | 2.2.3 | 2.2.3.x |
| samba / samba | 3.0.21b | 3.0.21b.x |
| samba / samba | 2.0.6 | 2.0.6.x |
| samba / samba | 3.0.0 | 3.0.0.x |
| samba / samba | 2.2.11 | 2.2.11.x |
| samba / samba | 3.0.11 | 3.0.11.x |
| samba / samba | 2.0.4 | 2.0.4.x |
| samba / samba | 3.0.13 | 3.0.13.x |
| samba / samba | 3.0.20b | 3.0.20b.x |
| samba / samba | 2.2.7a | 2.2.7a.x |
| samba / samba | 2.2.4 | 2.2.4.x |
| samba / samba | 2.0.9 | 2.0.9.x |
| samba / samba | 3.0.21 | 3.0.21.x |
| samba / samba | 3.0.26 | 3.0.26.x |
| samba / samba | 3.0.14 | 3.0.14.x |
| samba / samba | 3.0.25-pre1 | 3.0.25-pre1.x |
| samba / samba | 2.0.3 | 2.0.3.x |
| samba / samba | 3.0.21c | 3.0.21c.x |
| samba / samba | 3.0.23b | 3.0.23b.x |
| samba / samba | 3.0.25-rc3 | 3.0.25-rc3.x |
| samba / samba | 2.2.6 | 2.2.6.x |
| samba / samba | 2.2.8 | 2.2.8.x |
| samba / samba | 3.0.2 | 3.0.2.x |
| samba / samba | 3.0.12 | 3.0.12.x |
| samba / samba | 3.0.20 | 3.0.20.x |
| samba / samba | 2.2.0a | 2.2.0a.x |
| samba / samba | 2.0.7 | 2.0.7.x |
| samba / samba | 2.0.8 | 2.0.8.x |
| samba / samba | 3.0.25a | 3.0.25a.x |
| samba / samba | 3.0.25c | 3.0.25c.x |
| samba / samba | 3.0.24 | 3.0.24.x |
| samba / samba | 3.0.10 | 3.0.10.x |
| samba / samba | 2.2.2 | 2.2.2.x |
| samba / samba | 2.0.5 | 2.0.5.x |
| samba / samba | 3.0.23d | 3.0.23d.x |
| samba / samba | 3.0.25-rc2 | 3.0.25-rc2.x |
| samba / samba | 2.2.0 | 2.2.0.x |
| samba / samba | 2.2.5 | 2.2.5.x |
| samba / samba | 3.0.23c | 3.0.23c.x |
| samba / samba | 2.2.7 | 2.2.7.x |
| samba / samba | 3.0.23a | 3.0.23a.x |
| samba / samba | 3.0.25 | 3.0.25.x |
| samba / samba | 3.0.1 | 3.0.1.x |
| samba / samba | 3.0.22 | 3.0.22.x |