Description
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Published: 2007-02-06
Score: 7.5 High
EPSS: 4.4% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-1257-1 New samba packages fix several vulnerabilities
EUVD EUVD EUVD-2007-0453 Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Ubuntu USN Ubuntu USN USN-419-1 Samba vulnerabilities
History

No history.

Subscriptions

Debian Debian Linux
Mandrakesoft Mandrake Linux Mandrake Linux Corporate Server Mandrake Linuxsoft 2007
Samba Samba
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-07T12:19:30.137Z

Reserved: 2007-01-23T00:00:00.000Z

Link: CVE-2007-0454

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-02-06T02:28:00.000

Modified: 2026-04-23T00:35:47.467

Link: CVE-2007-0454

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses