CveMateVulnerability intelligence

CVE-2007-5398: samba

CVSS: 9.3v2.0HighModified

AliasesRHSA-2007:1034DEBIAN-CVE-2007-5398

Published 16-11-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-5398 is a high (CVSS 9.3) vulnerability in samba. EPSS estimates a 11.40% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

11.40%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 2

DSA-1409-1 DSA-1409-2 DSA-1409-3 OPENSUSE-SU-2024:10683-1 OPENSUSE-SU-2024:11365-1 RHSA-2007:1013+2 more

Timeline

16-11-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

11.40%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.40% on 20-09-2026

20-09-202620-10-2026

EPSS score

11.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat5 products

samba< 0:3.0.10-2.el4_5.1
samba-client< 0:3.0.10-2.el4_5.1
samba-common< 0:3.0.10-2.el4_5.1
samba-debuginfo< 0:3.0.10-2.el4_5.1
samba-swat< 0:3.0.10-2.el4_5.1

Debian1 product

samba< 3.0.27-1

Samba1 product

sambaEOL3.0.0 | 3.0.1 | 3.0.2 | 3.0.2a | 3.0.3 | 3.0.4 | 3.0.4:rc1 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.14a | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.0.20 | 3.0.20a | 3.0.20b | 3.0.21 | 3.0.21a | 3.0.21b | 3.0.21c | 3.0.22 | 3.0.23 | 3.0.23a | 3.0.23b | 3.0.23c | 3.0.23d | 3.0.24 | 3.0.25 | 3.0.25:pre1 | 3.0.25:pre2 | 3.0.25:rc1 | 3.0.25:rc2 | 3.0.25:rc3 | 3.0.25a | 3.0.25b | 3.0.25c | 3.0.26 | 3.0.26a

3 vendors · 7 products

References

59 links

secunia.com/advisories/27691Third Party AdvisoryX Refsource SECUNIA
secunia.com/secunia_research/2007-90/advisory/X Refsource MISC
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10230VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2007-1016.htmlVendor AdvisoryX Refsource REDHAT
usn.ubuntu.com/544-1/Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2007/4238VDB EntryX Refsource VUPEN
www.us-cert.gov/cas/techalerts/TA07-352A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/30835Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/29341Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.447739Vendor AdvisoryX Refsource SLACKWARE

Show all 59 references

marc.info?l=bugtraq&m=120524782005154&w=2Vendor AdvisoryX Refsource HP
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5811VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/28136Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3869VDB EntryX Refsource VUPEN
secunia.com/advisories/27679Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27682Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27701Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1018953VDB EntryX Refsource SECTRACK
www.redhat.com/support/errata/RHSA-2007-1013.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2008/1908VDB EntryX Refsource VUPEN
secunia.com/advisories/27720Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27742Third Party AdvisoryX Refsource SECUNIA
www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657Vendor AdvisoryX Refsource HP
secunia.com/advisories/30484Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/485936/100/0/threadedMailing ListX Refsource BUGTRAQ
www.debian.org/security/2007/dsa-1409Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/27450Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27731Third Party AdvisoryX Refsource SECUNIA
lists.vmware.com/pipermail/security-announce/2008/000002.htmlMailing ListX Refsource MLIST
lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlVendor AdvisoryX Refsource APPLE
www.mandriva.com/security/advisories?name=MDKSA-2007:224Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27787Third Party AdvisoryX Refsource SECUNIA
docs.info.apple.com/article.html?artnum=307179X Refsource CONFIRM
secunia.com/advisories/28368Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/26455VDB EntryX Refsource BID
issues.rpath.com/browse/RPL-1894X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200711-29.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/archive/1/483744/100/0/threadedMailing ListX Refsource BUGTRAQ
www.redhat.com/archives/fedora-package-announce/2007-November/msg00472.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/27927Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1712/referencesVDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2008/0859/referencesVDB EntryX Refsource VUPEN
securityreason.com/securityalert/3372Third Party AdvisoryX Refsource SREASON
sunsolve.sun.com/search/document.do?assetkey=1-26-237764-1Vendor AdvisoryX Refsource SUNALERT
us1.samba.org/samba/security/CVE-2007-5398.htmlX Refsource CONFIRM
www.vmware.com/security/advisories/VMSA-2008-0001.htmlX Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2007-1017.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2008/0064VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/38502VDB EntryX Refsource XF
www.novell.com/linux/security/advisories/2007_65_samba.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/archive/1/486859/100/0/threadedMailing ListX Refsource BUGTRAQ
access.redhat.com/errata/RHSA-2007:1034Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=358831REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1034.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-5398REPORT
www.cve.org/CVERecord?id=CVE-2007-5398Advisory
nvd.nist.gov/vuln/detail/CVE-2007-5398Advisory
security-tracker.debian.org/tracker/CVE-2007-5398Advisory