oval:org.mitre.oval:def:5605

Definition Id: oval:org.mitre.oval:def:5605

Oval ID:	oval:org.mitre.oval:def:5605
Title:	HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code
Description:	Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2007-6015	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests CIFS-Server.CIFS-ADMIN version is less than A.02.03.04 AND CIFS-Server.CIFS-DOC version is less than A.02.03.04 AND CIFS-Server.CIFS-LIB version is less than A.02.03.04 AND CIFS-Server.CIFS-MAN version is less than A.02.03.04 AND CIFS-Server.CIFS-RUN version is less than A.02.03.04 AND CIFS-Server.CIFS-UTIL version is less than A.02.03.04