Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2007-2446
PUBLISHED
More InfoOfficial Page
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
View Known Exploited Vulnerability (KEV) details
Published At-14 May, 2007 | 21:00
Updated At-07 Aug, 2024 | 13:42
Rejected At-
▼CVE Numbering Authority (CNA)

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://security.gentoo.org/glsa/glsa-200705-15.xml
vendor-advisory
x_refsource_GENTOO
http://www.securityfocus.com/archive/1/468672/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://secunia.com/advisories/25289
third-party-advisory
x_refsource_SECUNIA
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
mailing-list
x_refsource_FULLDISC
http://www.securityfocus.com/archive/1/468673/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/468674/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.samba.org/samba/security/CVE-2007-2446.html
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/34316
vdb-entry
x_refsource_XF
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/2732
vdb-entry
x_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/1805
vdb-entry
x_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/3229
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/25772
third-party-advisory
x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
vendor-advisory
x_refsource_HP
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
vendor-advisory
x_refsource_OPENPKG
http://secunia.com/advisories/25257
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/25391/
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/bid/24198
vdb-entry
x_refsource_BID
http://www.securityfocus.com/archive/1/468675/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
vendor-advisory
x_refsource_SUSE
http://secunia.com/advisories/25270
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/468670/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
vendor-advisory
x_refsource_APPLE
https://exchange.xforce.ibmcloud.com/vulnerabilities/34314
vdb-entry
x_refsource_XF
http://www.vupen.com/english/advisories/2007/2281
vdb-entry
x_refsource_VUPEN
http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
x_refsource_MISC
http://www.vupen.com/english/advisories/2007/2210
vdb-entry
x_refsource_VUPEN
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
vendor-advisory
x_refsource_HP
https://exchange.xforce.ibmcloud.com/vulnerabilities/34311
vdb-entry
x_refsource_XF
http://www.trustix.org/errata/2007/0017/
vendor-advisory
x_refsource_TRUSTIX
http://www.ubuntu.com/usn/usn-460-1
vendor-advisory
x_refsource_UBUNTU
https://exchange.xforce.ibmcloud.com/vulnerabilities/34312
vdb-entry
x_refsource_XF
http://securityreason.com/securityalert/2702
third-party-advisory
x_refsource_SREASON
http://secunia.com/advisories/25567
third-party-advisory
x_refsource_SECUNIA
http://osvdb.org/34731
vdb-entry
x_refsource_OSVDB
http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
x_refsource_MISC
http://osvdb.org/34699
vdb-entry
x_refsource_OSVDB
http://secunia.com/advisories/25241
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/28292
third-party-advisory
x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
vendor-advisory
x_refsource_MANDRIVA
http://secunia.com/advisories/25256
third-party-advisory
x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1366
x_refsource_CONFIRM
http://secunia.com/advisories/25259
third-party-advisory
x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/34309
vdb-entry
x_refsource_XF
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
vendor-advisory
x_refsource_SLACKWARE
http://www.osvdb.org/34732
vdb-entry
x_refsource_OSVDB
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
vendor-advisory
x_refsource_SUNALERT
http://www.securityfocus.com/archive/1/468542/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.securitytracker.com/id?1018050
vdb-entry
x_refsource_SECTRACK
http://www.securityfocus.com/bid/23973
vdb-entry
x_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
x_refsource_MISC
http://secunia.com/advisories/26909
third-party-advisory
x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
vendor-advisory
x_refsource_HP
http://www.vupen.com/english/advisories/2008/0050
vdb-entry
x_refsource_VUPEN
http://secunia.com/advisories/27706
third-party-advisory
x_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1291
vendor-advisory
x_refsource_DEBIAN
http://www.kb.cert.org/vuls/id/773720
third-party-advisory
x_refsource_CERT-VN
http://docs.info.apple.com/article.html?artnum=306172
x_refsource_CONFIRM
http://secunia.com/advisories/25232
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/25251
third-party-advisory
x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
vendor-advisory
x_refsource_SUNALERT
http://secunia.com/advisories/25246
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/468680/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/24197
vdb-entry
x_refsource_BID
http://osvdb.org/34733
vdb-entry
x_refsource_OSVDB
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415
vdb-entry
signature
x_refsource_OVAL
http://www.securityfocus.com/bid/25159
vdb-entry
x_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
x_refsource_MISC
http://secunia.com/advisories/25255
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/bid/24196
vdb-entry
x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2007-0354.html
vendor-advisory
x_refsource_REDHAT
http://www.securityfocus.com/bid/24195
vdb-entry
x_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
x_refsource_MISC
http://secunia.com/advisories/26235
third-party-advisory
x_refsource_SECUNIA
http://secunia.com/advisories/25675
third-party-advisory
x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2079
vdb-entry
x_refsource_VUPEN
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
http://security.gentoo.org/glsa/glsa-200705-15.xml
vendor-advisory
x_refsource_GENTOO
x_transferred
http://www.securityfocus.com/archive/1/468672/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://secunia.com/advisories/25289
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
mailing-list
x_refsource_FULLDISC
x_transferred
http://www.securityfocus.com/archive/1/468673/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.securityfocus.com/archive/1/468674/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.samba.org/samba/security/CVE-2007-2446.html
x_refsource_CONFIRM
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34316
vdb-entry
x_refsource_XF
x_transferred
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
x_refsource_CONFIRM
x_transferred
http://www.vupen.com/english/advisories/2007/2732
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.vupen.com/english/advisories/2007/1805
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.vupen.com/english/advisories/2007/3229
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/25772
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
vendor-advisory
x_refsource_HP
x_transferred
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
vendor-advisory
x_refsource_OPENPKG
x_transferred
http://secunia.com/advisories/25257
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/25391/
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/bid/24198
vdb-entry
x_refsource_BID
x_transferred
http://www.securityfocus.com/archive/1/468675/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
vendor-advisory
x_refsource_SUSE
x_transferred
http://secunia.com/advisories/25270
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/archive/1/468670/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
vendor-advisory
x_refsource_APPLE
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34314
vdb-entry
x_refsource_XF
x_transferred
http://www.vupen.com/english/advisories/2007/2281
vdb-entry
x_refsource_VUPEN
x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-033.html
x_refsource_MISC
x_transferred
http://www.vupen.com/english/advisories/2007/2210
vdb-entry
x_refsource_VUPEN
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
vendor-advisory
x_refsource_HP
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34311
vdb-entry
x_refsource_XF
x_transferred
http://www.trustix.org/errata/2007/0017/
vendor-advisory
x_refsource_TRUSTIX
x_transferred
http://www.ubuntu.com/usn/usn-460-1
vendor-advisory
x_refsource_UBUNTU
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34312
vdb-entry
x_refsource_XF
x_transferred
http://securityreason.com/securityalert/2702
third-party-advisory
x_refsource_SREASON
x_transferred
http://secunia.com/advisories/25567
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://osvdb.org/34731
vdb-entry
x_refsource_OSVDB
x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-031.html
x_refsource_MISC
x_transferred
http://osvdb.org/34699
vdb-entry
x_refsource_OSVDB
x_transferred
http://secunia.com/advisories/25241
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/28292
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
vendor-advisory
x_refsource_MANDRIVA
x_transferred
http://secunia.com/advisories/25256
third-party-advisory
x_refsource_SECUNIA
x_transferred
https://issues.rpath.com/browse/RPL-1366
x_refsource_CONFIRM
x_transferred
http://secunia.com/advisories/25259
third-party-advisory
x_refsource_SECUNIA
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/34309
vdb-entry
x_refsource_XF
x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
vendor-advisory
x_refsource_SLACKWARE
x_transferred
http://www.osvdb.org/34732
vdb-entry
x_refsource_OSVDB
x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
vendor-advisory
x_refsource_SUNALERT
x_transferred
http://www.securityfocus.com/archive/1/468542/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.securitytracker.com/id?1018050
vdb-entry
x_refsource_SECTRACK
x_transferred
http://www.securityfocus.com/bid/23973
vdb-entry
x_refsource_BID
x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-030.html
x_refsource_MISC
x_transferred
http://secunia.com/advisories/26909
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
vendor-advisory
x_refsource_HP
x_transferred
http://www.vupen.com/english/advisories/2008/0050
vdb-entry
x_refsource_VUPEN
x_transferred
http://secunia.com/advisories/27706
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.debian.org/security/2007/dsa-1291
vendor-advisory
x_refsource_DEBIAN
x_transferred
http://www.kb.cert.org/vuls/id/773720
third-party-advisory
x_refsource_CERT-VN
x_transferred
http://docs.info.apple.com/article.html?artnum=306172
x_refsource_CONFIRM
x_transferred
http://secunia.com/advisories/25232
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/25251
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
vendor-advisory
x_refsource_SUNALERT
x_transferred
http://secunia.com/advisories/25246
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/archive/1/468680/100/0/threaded
mailing-list
x_refsource_BUGTRAQ
x_transferred
http://www.securityfocus.com/bid/24197
vdb-entry
x_refsource_BID
x_transferred
http://osvdb.org/34733
vdb-entry
x_refsource_OSVDB
x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415
vdb-entry
signature
x_refsource_OVAL
x_transferred
http://www.securityfocus.com/bid/25159
vdb-entry
x_refsource_BID
x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-032.html
x_refsource_MISC
x_transferred
http://secunia.com/advisories/25255
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/bid/24196
vdb-entry
x_refsource_BID
x_transferred
http://www.redhat.com/support/errata/RHSA-2007-0354.html
vendor-advisory
x_refsource_REDHAT
x_transferred
http://www.securityfocus.com/bid/24195
vdb-entry
x_refsource_BID
x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-07-029.html
x_refsource_MISC
x_transferred
http://secunia.com/advisories/26235
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://secunia.com/advisories/25675
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.vupen.com/english/advisories/2007/2079
vdb-entry
x_refsource_VUPEN
x_transferred
Details not found