Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96 when the -o option is omitted allow remote attackers to execute arbitrary code via a crafted SMB packet.