CVE-2007-0454
Fixed in a distro release EPSS 6%
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Products: samba, debian_linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, mandrakesoft mandrake_linuxsoft_2007
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | samba | 3.0.23d-5 |
| Debian 13 | samba | 3.0.23d-5 |
| Debian 14 | samba | 3.0.23d-5 |
| Debian 3.1 | samba | 3.0.14a-3sarge4 |