Input validation error in Samba - CVE-2012-1182

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU33952

Input validation error in Samba - CVE-2012-1182

Published: April 11, 2012 / Updated: August 4, 2020


Vulnerability identifier: #VU33952
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-1182
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.


Affected software

Samba
Server Automation
HP-UX Common Internet File System (CIFS)
samba (Alpine package)
SUSE Linux

How to mitigate CVE-2012-1182

Install update from vendor's website.

Samba - update to 3.4.16
samba (Alpine package) - addressed in versions 3.5.14-r0, 3.5.15-r0
HP-UX Common Internet File System (CIFS) - addressed in versions A.02.03.06, A.02.04.06, A.03.01.05

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins