CVE-2007-0454

Publication date 6 February 2007

Last updated 24 July 2024


Ubuntu priority

Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.

Status

Package Ubuntu Release Status
samba 7.04 feisty
Fixed 3.0.24-2ubuntu1.2
6.10 edgy
Fixed 3.0.22-1ubuntu4.2
6.06 LTS dapper
Fixed 3.0.22-1ubuntu3.3

References

Related Ubuntu Security Notices (USN)

    • USN-419-1
    • Samba vulnerabilities
    • 6 February 2007

Other references