CVE-2014-3560

Description

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.

References

https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2

https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605

https://exchange.xforce.ibmcloud.com/vulnerabilities/95081

https://bugzilla.redhat.com/show_bug.cgi?id=1126010

http://www.ubuntu.com/usn/USN-2305-1

http://www.securitytracker.com/id/1030663

http://www.securityfocus.com/bid/69021

http://www.samba.org/samba/security/CVE-2014-3560

http://secunia.com/advisories/59976

http://secunia.com/advisories/59610

http://secunia.com/advisories/59583

http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3