CVE-2007-0453 in Samba

Summary

Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/23/2007
• Disclosure: 02/05/2007
• Moderation: VulDB entry created
• Entries: VDB-2901 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00528
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0453
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0453
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0453/