• info
• discussion
• exploit
• solution
• references

Samba NDR RPC Request RFNPCNEX Heap-Based Buffer Overflow Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the referenced advisory for more information.


Sun Solaris 10.0

• Sun 119757-05
  http://sunsolve.sun.com/patches/

Xerox WorkCentre 275

• Xerox cert_P32v2_WCP275_WC7665_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P32v2_WCP275_WC7665_Patch .zip

Xerox WorkCentre Pro 245

• Xerox cert_P32v2_WCP275_WC7665_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P32v2_WCP275_WC7665_Patch .zip

Xerox WorkCentre 245

• Xerox cert_P32v2_WCP275_WC7665_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P32v2_WCP275_WC7665_Patch .zip

Xerox WorkCentre 265

• Xerox cert_P32v2_WCP275_WC7665_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P32v2_WCP275_WC7665_Patch .zip

HP Internet Express 6.6

• HP IX66-SAMBA-20070528.tar.gz
  http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=IX66-SAMBA -20070530

HP HP-UX B.11.23

• HP A.02.03.02
  http://www.hp.com/go/softwaredepot/

HP HP-UX B.11.11

• HP A.02.03.02
  http://www.hp.com/go/softwaredepot/

Xerox WorkCentre Pro 265

• Xerox cert_P32v2_WCP275_WC7665_Patch.zip
  http://www.xerox.com/downloads/usa/en/c/cert_P32v2_WCP275_WC7665_Patch .zip

Apple Mac OS X 10.3.9

• Apple SecUpd2007-007Pan.dmg For Mac OS X v10.3.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.10

• Apple SecUpd2007-007Ti.dmg For Mac OS X v10.4.10 (PowerPC)
  http://www.apple.com/support/downloads/


• Apple SecUpd2007-007Univ.dmg For Mac OS X v10.4.10 (Universal)
  http://www.apple.com/support/downloads/

Samba Samba 3.0.2 a

• Mandriva lib64smbclient0-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64smbclient0-devel-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva lib64smbclient0-static-devel-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva libsmbclient0-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libsmbclient0-devel-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libsmbclient0-static-devel-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva mount-cifs-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva mount-cifs-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva nss_wins-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva nss_wins-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-client-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-client-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-common-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-common-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-doc-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-doc-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-passdb-xml-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-passdb-xml-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-server-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-server-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-smbldap-tools-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-smbldap-tools-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-swat-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-swat-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-antivir-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-antivir-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-clamav-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-clamav-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-icap-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-vscan-icap-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva samba-winbind-3.0.14a-6.4.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva samba-winbind-3.0.14a-6.4.C30mdk.x86_64.rpm
  Corporate 3.0/X86_64:
  http://www.mandriva.com/en/download

Samba Samba 3.0.22

• Ubuntu libpam-smbpass_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0 .22-1ubuntu4.2_amd64.deb


• Ubuntu libpam-smbpass_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0 .22-1ubuntu4.2_i386.deb


• Ubuntu libpam-smbpass_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0 .22-1ubuntu4.2_powerpc.deb


• Ubuntu libpam-smbpass_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libpam-smbpass_3.0 .22-1ubuntu4.2_sparc.deb


• Ubuntu libsmbclient-dev_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3 .0.22-1ubuntu4.2_amd64.deb


• Ubuntu libsmbclient-dev_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3 .0.22-1ubuntu4.2_i386.deb


• Ubuntu libsmbclient-dev_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3 .0.22-1ubuntu4.2_powerpc.deb


• Ubuntu libsmbclient-dev_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient-dev_3 .0.22-1ubuntu4.2_sparc.deb


• Ubuntu libsmbclient_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.2 2-1ubuntu4.2_amd64.deb


• Ubuntu libsmbclient_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.2 2-1ubuntu4.2_i386.deb


• Ubuntu libsmbclient_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.2 2-1ubuntu4.2_powerpc.deb


• Ubuntu libsmbclient_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/libsmbclient_3.0.2 2-1ubuntu4.2_sparc.deb


• Ubuntu python2.4-samba_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/python2.4-samba_3. 0.22-1ubuntu4.2_amd64.deb


• Ubuntu python2.4-samba_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/python2.4-samba_3. 0.22-1ubuntu4.2_i386.deb


• Ubuntu python2.4-samba_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/python2.4-samba_3. 0.22-1ubuntu4.2_powerpc.deb


• Ubuntu python2.4-samba_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/python2.4-samba_3. 0.22-1ubuntu4.2_sparc.deb


• Ubuntu samba-common_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.2 2-1ubuntu4.2_amd64.deb


• Ubuntu samba-common_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.2 2-1ubuntu4.2_i386.deb


• Ubuntu samba-common_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.2 2-1ubuntu4.2_powerpc.deb


• Ubuntu samba-common_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-common_3.0.2 2-1ubuntu4.2_sparc.deb


• Ubuntu samba-dbg_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.22-1 ubuntu4.2_amd64.deb


• Ubuntu samba-dbg_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.22-1 ubuntu4.2_i386.deb


• Ubuntu samba-dbg_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.22-1 ubuntu4.2_powerpc.deb


• Ubuntu samba-dbg_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-dbg_3.0.22-1 ubuntu4.2_sparc.deb


• Ubuntu samba-doc-pdf_3.0.22-1ubuntu4.2_all.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.0. 22-1ubuntu4.2_all.deb


• Ubuntu samba-doc-pdf_3.0.24-2ubuntu1.1_all.deb
  Ubuntu 7.04:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.0. 24-2ubuntu1.1_all.deb


• Ubuntu samba-doc_3.0.22-1ubuntu4.2_all.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc_3.0.22-1 ubuntu4.2_all.deb


• Ubuntu samba_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.22-1ubun tu4.2_amd64.deb


• Ubuntu samba_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.22-1ubun tu4.2_i386.deb


• Ubuntu samba_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.22-1ubun tu4.2_powerpc.deb


• Ubuntu samba_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.0.22-1ubun tu4.2_sparc.deb


• Ubuntu smbclient_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.22-1 ubuntu4.2_amd64.deb


• Ubuntu smbclient_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.22-1 ubuntu4.2_i386.deb


• Ubuntu smbclient_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.22-1 ubuntu4.2_powerpc.deb


• Ubuntu smbclient_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbclient_3.0.22-1 ubuntu4.2_sparc.deb


• Ubuntu smbfs_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.22-1ubun tu4.2_amd64.deb


• Ubuntu smbfs_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.22-1ubun tu4.2_i386.deb


• Ubuntu smbfs_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.22-1ubun tu4.2_powerpc.deb


• Ubuntu smbfs_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/smbfs_3.0.22-1ubun tu4.2_sparc.deb


• Ubuntu swat_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.22-1ubunt u4.2_amd64.deb


• Ubuntu swat_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.22-1ubunt u4.2_i386.deb


• Ubuntu swat_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.22-1ubunt u4.2_powerpc.deb


• Ubuntu swat_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/swat_3.0.22-1ubunt u4.2_sparc.deb


• Ubuntu winbind_3.0.22-1ubuntu4.2_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.22-1ub untu4.2_amd64.deb


• Ubuntu winbind_3.0.22-1ubuntu4.2_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.22-1ub untu4.2_i386.deb


• Ubuntu winbind_3.0.22-1ubuntu4.2_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.22-1ub untu4.2_powerpc.deb


• Ubuntu winbind_3.0.22-1ubuntu4.2_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/s/samba/winbind_3.0.22-1ub untu4.2_sparc.deb