NETBIOS: Mailslot Overflow

This signature detects attempts to exploit a known vulnerability in the Samba. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Samba is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. NOTE: This issue occurs only when the 'domain logons' option is enabled. An attacker can exploit this issue to execute arbitrary code with superuser privileges. Successful attacks will completely compromise affected computers. Failed exploit attempts will result in a denial of service.

Affected Products

Ubuntu ubuntu_linux

References

BugTraq: 26791

CVE: CVE-2007-6015

URL: http://www.samba.org/samba/security/CVE-2007-6015.html

Short Name

NETBIOS:OVERFLOW:MAILSLOT

Severity

Major

Recommended

False

Recommended Action

Drop

NETBIOS: Mailslot Overflow

Extended Description

Affected Products

References

Found a potential security threat?