Multiple buffer overflows in smbvalid/smbval SMB authentication library as used in Apache::AuthenSmb and possibly other modules allows remote attackers to execute arbitrary commands via (1) a long username (2) a long password and (3) other unspecified methods.