CVE-2012-2111

Samba 3.4.x-3.4.16, 3.5.x-3.5.14, 3.6.x-3.6.4 - Authenticated Privilege Escalation via LSA RPC Procedures

Title source: llm
STIX 2.1

Description

The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.

References (21)

Core 21
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1434-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/81648
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:067
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48996
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49017
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1026988
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=134323086902585&w=2
Patch, Vendor Advisory x_refsource_confirm
http://www.samba.org/samba/security/CVE-2012-2111
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48976
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/49030
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48984
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48999
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2463
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-0533.html

Scores

EPSS 0.0226
EPSS Percentile 84.8%

Details

CWE
CWE-264
Status published
Products (37)
samba/samba 3.4.0
samba/samba 3.4.1
samba/samba 3.4.2
samba/samba 3.4.3
samba/samba 3.4.4
samba/samba 3.4.5
samba/samba 3.4.6
samba/samba 3.4.7
samba/samba 3.4.8
samba/samba 3.4.9
... and 27 more
Published Apr 30, 2012
Tracked Since Feb 18, 2026