CVE-2014-3560

Description (CNA)

NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap memory, involving a sizeof operation on an incorrect variable in the unstrcpy macro in string_wrappers.h.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1126010
• http://www.samba.org/samba/security/CVE-2014-3560
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136280.html
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
• https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=e6a848630da3ba958c442438ea131c99fa088605
• http://www.securitytracker.com/id/1030663
• http://secunia.com/advisories/59583
• http://www.securityfocus.com/bid/69021
• http://www.ubuntu.com/usn/USN-2305-1
• http://lists.opensuse.org/opensuse-updates/2014-08/msg00027.html
• https://git.samba.org/?p=samba.git%3Ba=commitdiff%3Bh=fb1d325d96dfe9bc2e9c4ec46ad4c55e8f18f4a2
• http://secunia.com/advisories/59610
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95081
• http://secunia.com/advisories/59976

ADP enrichment