CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: multiple heap-based buffer overflows in the ndr parsing in smbd in samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted ms-rpc requests involving (1) dfsenum (netdfs_io_dfs_enuminfo_d), (2) rfnpcnex (smb_io_notify_option_type_data), (3) lsaraddprivilegestoaccount (lsa_io_privilege_set), (4) netsetfilesecurity (sec_io_acl), or (5) lsarlookupsids/lsarlookupsids2 (lsa_io_trans_names).
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-05-14
Last Modified Date: 2018-10-16