NVD脆弱性詳細

CVE-2007-2446

概要	Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3) LsarAddPrivilegesToAccount (lsa_io_privilege_set), (4) NetSetFileSecurity (sec_io_acl), or (5) LsarLookupSids/LsarLookupSids2 (lsa_io_trans_names).
公表日	2007年5月15日6:19
登録日	2021年1月29日14:12
最終更新日	2018年10月17日1:43

CVSS2.0 : HIGH
スコア	10.0
ベクター	AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:samba:samba:3.0.0:::::::*
cpe:2.3:a:samba:samba:3.0.1:::::::*
cpe:2.3:a:samba:samba:3.0.2:::::::*
cpe:2.3:a:samba:samba:3.0.2a:::::::*
cpe:2.3:a:samba:samba:3.0.10:::::::*
cpe:2.3:a:samba:samba:3.0.11:::::::*
cpe:2.3:a:samba:samba:3.0.12:::::::*
cpe:2.3:a:samba:samba:3.0.13:::::::*
cpe:2.3:a:samba:samba:3.0.14:::::::*
cpe:2.3:a:samba:samba:3.0.14a:::::::*
cpe:2.3:a:samba:samba:3.0.15:::::::*
cpe:2.3:a:samba:samba:3.0.16:::::::*
cpe:2.3:a:samba:samba:3.0.17:::::::*
cpe:2.3:a:samba:samba:3.0.18:::::::*
cpe:2.3:a:samba:samba:3.0.19:::::::*
cpe:2.3:a:samba:samba:3.0.20:::::::*
cpe:2.3:a:samba:samba:3.0.20a:::::::*
cpe:2.3:a:samba:samba:3.0.20b:::::::*
cpe:2.3:a:samba:samba:3.0.21:::::::*
cpe:2.3:a:samba:samba:3.0.21a:::::::*
cpe:2.3:a:samba:samba:3.0.21b:::::::*
cpe:2.3:a:samba:samba:3.0.21c:::::::*
cpe:2.3:a:samba:samba:3.0.22:::::::*
cpe:2.3:a:samba:samba:3.0.23:::::::*
cpe:2.3:a:samba:samba:3.0.23a:::::::*
cpe:2.3:a:samba:samba:3.0.23b:::::::*
cpe:2.3:a:samba:samba:3.0.23c:::::::*
cpe:2.3:a:samba:samba:3.0.23d:::::::*
cpe:2.3:a:samba:samba:3.0.24:::::::*
cpe:2.3:a:samba:samba:3.0.25:pre1::::::
cpe:2.3:a:samba:samba:3.0.25:pre2::::::
cpe:2.3:a:samba:samba:3.0.25:rc1::::::
cpe:2.3:a:samba:samba:3.0.25:rc2::::::
cpe:2.3:a:samba:samba:3.0.25:rc3::::::

関連情報、対策とツール

No	URL	refsource	タグ
1	http://docs.info.apple.com/article.html?artnum=306172	CONFIRM
2	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768	HP
3	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980	HP
4	http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html	APPLE
5	http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html	FULLDISC
6	http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html	SUSE
7	http://osvdb.org/34699	OSVDB
8	http://osvdb.org/34731	OSVDB
9	http://osvdb.org/34733	OSVDB
10	http://secunia.com/advisories/25232	SECUNIA	Vendor Advisory
11	http://secunia.com/advisories/25241	SECUNIA	Vendor Advisory
12	http://secunia.com/advisories/25246	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/25251	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/25255	SECUNIA	Vendor Advisory
15	http://secunia.com/advisories/25256	SECUNIA	Vendor Advisory
16	http://secunia.com/advisories/25257	SECUNIA	Vendor Advisory
17	http://secunia.com/advisories/25259	SECUNIA	Vendor Advisory
18	http://secunia.com/advisories/25270	SECUNIA	Vendor Advisory
19	http://secunia.com/advisories/25289	SECUNIA
20	http://secunia.com/advisories/25391/	SECUNIA
21	http://secunia.com/advisories/25567	SECUNIA
22	http://secunia.com/advisories/25675	SECUNIA
23	http://secunia.com/advisories/25772	SECUNIA
24	http://secunia.com/advisories/26235	SECUNIA
25	http://secunia.com/advisories/26909	SECUNIA
26	http://secunia.com/advisories/27706	SECUNIA
27	http://secunia.com/advisories/28292	SECUNIA
28	http://security.gentoo.org/glsa/glsa-200705-15.xml	GENTOO
29	http://securityreason.com/securityalert/2702	SREASON
30	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906	SLACKWARE
31	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1	SUNALERT
32	http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1	SUNALERT
33	http://www.debian.org/security/2007/dsa-1291	DEBIAN
34	http://www.kb.cert.org/vuls/id/773720	CERT-VN	US Government Resource
35	http://www.mandriva.com/security/advisories?name=MDKSA-2007:104	MANDRIVA
36	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html	OPENPKG
37	http://www.osvdb.org/34732	OSVDB
38	http://www.redhat.com/support/errata/RHSA-2007-0354.html	REDHAT	Vendor Advisory
39	http://www.samba.org/samba/security/CVE-2007-2446.html	CONFIRM	Patch Vendor Advisory
40	http://www.securityfocus.com/archive/1/468542/100/0/threaded	BUGTRAQ
41	http://www.securityfocus.com/archive/1/468670/100/0/threaded	BUGTRAQ
42	http://www.securityfocus.com/archive/1/468672/100/0/threaded	BUGTRAQ
43	http://www.securityfocus.com/archive/1/468673/100/0/threaded	BUGTRAQ
44	http://www.securityfocus.com/archive/1/468674/100/0/threaded	BUGTRAQ
45	http://www.securityfocus.com/archive/1/468675/100/0/threaded	BUGTRAQ
46	http://www.securityfocus.com/archive/1/468680/100/0/threaded	BUGTRAQ
47	http://www.securityfocus.com/bid/23973	BID
48	http://www.securityfocus.com/bid/24195	BID
49	http://www.securityfocus.com/bid/24196	BID
50	http://www.securityfocus.com/bid/24197	BID
51	http://www.securityfocus.com/bid/24198	BID
52	http://www.securityfocus.com/bid/25159	BID
53	http://www.securitytracker.com/id?1018050	SECTRACK
54	http://www.trustix.org/errata/2007/0017/	TRUSTIX
55	http://www.ubuntu.com/usn/usn-460-1	UBUNTU
56	http://www.vupen.com/english/advisories/2007/1805	VUPEN
57	http://www.vupen.com/english/advisories/2007/2079	VUPEN
58	http://www.vupen.com/english/advisories/2007/2210	VUPEN
59	http://www.vupen.com/english/advisories/2007/2281	VUPEN
60	http://www.vupen.com/english/advisories/2007/2732	VUPEN
61	http://www.vupen.com/english/advisories/2007/3229	VUPEN
62	http://www.vupen.com/english/advisories/2008/0050	VUPEN
63	http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf	CONFIRM
64	http://www.zerodayinitiative.com/advisories/ZDI-07-029.html	MISC
65	http://www.zerodayinitiative.com/advisories/ZDI-07-030.html	MISC
66	http://www.zerodayinitiative.com/advisories/ZDI-07-031.html	MISC
67	http://www.zerodayinitiative.com/advisories/ZDI-07-032.html	MISC
68	http://www.zerodayinitiative.com/advisories/ZDI-07-033.html	MISC
69	https://exchange.xforce.ibmcloud.com/vulnerabilities/34309	XF
70	https://exchange.xforce.ibmcloud.com/vulnerabilities/34311	XF
71	https://exchange.xforce.ibmcloud.com/vulnerabilities/34312	XF
72	https://exchange.xforce.ibmcloud.com/vulnerabilities/34314	XF
73	https://exchange.xforce.ibmcloud.com/vulnerabilities/34316	XF
74	https://issues.rpath.com/browse/RPL-1366	CONFIRM
75	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11415	OVAL

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

構成1	以上	以下	より上	未満
cpe:2.3:a:samba:samba:3.0.0:::::::*
cpe:2.3:a:samba:samba:3.0.1:::::::*
cpe:2.3:a:samba:samba:3.0.2:::::::*
cpe:2.3:a:samba:samba:3.0.2a:::::::*
cpe:2.3:a:samba:samba:3.0.10:::::::*
cpe:2.3:a:samba:samba:3.0.11:::::::*
cpe:2.3:a:samba:samba:3.0.12:::::::*
cpe:2.3:a:samba:samba:3.0.13:::::::*
cpe:2.3:a:samba:samba:3.0.14:::::::*
cpe:2.3:a:samba:samba:3.0.14a:::::::*
cpe:2.3:a:samba:samba:3.0.15:::::::*
cpe:2.3:a:samba:samba:3.0.16:::::::*
cpe:2.3:a:samba:samba:3.0.17:::::::*
cpe:2.3:a:samba:samba:3.0.18:::::::*
cpe:2.3:a:samba:samba:3.0.19:::::::*
cpe:2.3:a:samba:samba:3.0.20:::::::*
cpe:2.3:a:samba:samba:3.0.20a:::::::*
cpe:2.3:a:samba:samba:3.0.20b:::::::*
cpe:2.3:a:samba:samba:3.0.21:::::::*
cpe:2.3:a:samba:samba:3.0.21a:::::::*
cpe:2.3:a:samba:samba:3.0.21b:::::::*
cpe:2.3:a:samba:samba:3.0.21c:::::::*
cpe:2.3:a:samba:samba:3.0.22:::::::*
cpe:2.3:a:samba:samba:3.0.23:::::::*
cpe:2.3:a:samba:samba:3.0.23a:::::::*
cpe:2.3:a:samba:samba:3.0.23b:::::::*
cpe:2.3:a:samba:samba:3.0.23c:::::::*
cpe:2.3:a:samba:samba:3.0.23d:::::::*
cpe:2.3:a:samba:samba:3.0.24:::::::*
cpe:2.3:a:samba:samba:3.0.25:pre1::::::
cpe:2.3:a:samba:samba:3.0.25:pre2::::::
cpe:2.3:a:samba:samba:3.0.25:rc1::::::
cpe:2.3:a:samba:samba:3.0.25:rc2::::::
cpe:2.3:a:samba:samba:3.0.25:rc3::::::