Unscored severity · published Feb 6, 2007
CVE-2007-0453
Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1)…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Buffer overflow in the nss_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers to execute arbitrary code via the (1) gethostbyname and (2) getipnodebyname functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
3.0.21; 3.0.21a; 3.0.21b; 3.0.21c; 3.0.22; 3.0.23; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0453
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0453
osvdb.org
http://osvdb.org/33098
secunia.com
http://secunia.com/advisories/24043
secunia.com
http://secunia.com/advisories/24101
secunia.com
http://secunia.com/advisories/24151
securitytracker.com
http://securitytracker.com/id?1017589
slackware.com
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…