CVE - CVE-2012-2111

CVE-ID
CVE-2012-2111	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1026988 URL:http://www.securitytracker.com/id?1026988 MISC:48976 URL:http://secunia.com/advisories/48976 MISC:48984 URL:http://secunia.com/advisories/48984 MISC:48996 URL:http://secunia.com/advisories/48996 MISC:48999 URL:http://secunia.com/advisories/48999 MISC:49017 URL:http://secunia.com/advisories/49017 MISC:49030 URL:http://secunia.com/advisories/49030 MISC:81648 URL:~~http://osvdb.org/81648~~ (Obsolete source) MISC:DSA-2463 URL:http://www.debian.org/security/2012/dsa-2463 MISC:FEDORA-2012-6981 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html MISC:FEDORA-2012-6999 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html MISC:FEDORA-2012-7006 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html MISC:HPSBUX02789 URL:http://marc.info/?l=bugtraq&m=134323086902585&w=2 MISC:MDVSA-2012:067 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:067~~ (Obsolete source) MISC:RHSA-2012:0533 URL:http://rhn.redhat.com/errata/RHSA-2012-0533.html MISC:SSRT100824 URL:http://marc.info/?l=bugtraq&m=134323086902585&w=2 MISC:SUSE-SU-2012:0573 URL:http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html MISC:SUSE-SU-2012:0591 URL:http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html MISC:USN-1434-1 URL:http://www.ubuntu.com/usn/USN-1434-1 MISC:http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 URL:http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 MISC:http://www.samba.org/samba/security/CVE-2012-2111 URL:http://www.samba.org/samba/security/CVE-2012-2111 MISC:openSUSE-SU-2012:0583 URL:http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20120404	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120404)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.