PT-2009-4350 · Samba Team+1 · Samba
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Samba versions 3.2.0 through 3.2.12
Description:
The issue is related to multiple format string vulnerabilities in the client/client.c file of smbclient. These vulnerabilities might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
Recommendations:
For Samba versions 3.2.0 through 3.2.12, update to a version outside of this range to mitigate the risk of exploitation.
Exploit
Correção
Use of Externally-Controlled Format String
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Samba