CVE-2012-1182 in Sambainfo

Summary

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

02/14/2012

Disclosure

04/10/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
5285Samba ReportEventW numeric error189HighOfficial fixCVE-2012-1182
5284Samba ndr_ValidatePassword numeric error189HighOfficial fixCVE-2012-1182
5283Samba lsa_LookupNames numeric error189HighOfficial fixCVE-2012-1182
5282Samba SetInfoPolicy AuditEventsInfo numeric error189HighOfficial fixCVE-2012-1182
5281Samba GetAliasMembership numeric error189HighOfficial fixCVE-2012-1182
5280Samba NDR PULL DFS EnumArray1 numeric error189HighOfficial fixCVE-2012-1182
5279Samba NDR PULL SVCCTL StartServiceW numeric error189HighOfficial fixCVE-2012-1182
5278Samba NDR PULL LSA TrustDomainInfoControllers numeric error189HighOfficial fixCVE-2012-1182
5277Samba ndr_pull_dfs_Info3 numeric error189HighOfficial fixCVE-2012-1182

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!