Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-0454

Fixed in a distro release EPSS 6%

Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.

Published 2007-02-06 · CVE record · OSV

Products: samba, debian_linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, mandrakesoft mandrake_linuxsoft_2007

Distro releases

ReleasePackageFixed in
Debian 12samba3.0.23d-5
Debian 13samba3.0.23d-5
Debian 14samba3.0.23d-5
Debian 3.1samba3.0.14a-3sarge4