Multiple vulnerabilities have been identified in Samba, which could be exploited by remote attackers to cause a denial of service or take complete control of an affected system.
The first issue is caused by a buffer overflow error in "nmbd" when processing specially crafted GETDC logon server requests, which could be exploited by attackers to crash an affected application or potentially execute arbitrary code via a malicious GETDC mailslot request.
The second vulnerability is caused by a buffer overflow error in the "reply_netbios_packet()" [nmbd/nmbd_packets.c] function when sending multiple specially crafted WINS "Name Registration" requests followed by a WINS "Name Query" request, which could be exploited by remote attackers to crash or compromise an application with the "wins support" option enabled in "smb.conf".
