CVE-2007-6015: Samba

High severity, CVSS 9.3. EPSS: 27.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.

Affected products

• Samba Samba: version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; version 2.0.6 only; …

Published 2007-12-13. Last modified 2026-06-16.