Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.

Project Subscriptions

Vendors Products
Debian Linux Subscribe
Mandrakesoft Subscribe
Mandrake Linux Subscribe
Mandrake Linux Corporate Server Subscribe
Mandrake Linuxsoft 2007 Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-1257-1 New samba packages fix several vulnerabilities
EUVD EUVD EUVD-2007-0453 Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Ubuntu USN Ubuntu USN USN-419-1 Samba vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T12:19:30.137Z

Reserved: 2007-01-23T00:00:00

Link: CVE-2007-0454

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-02-06T02:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0454

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses