(Gentoo Issues Fix) Samba Buffer Overflow in NDR Marshalling Code Lets Remote Users Execute Arbitrary Code

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1027200

SecurityTracker URL: http://securitytracker.com/id/1027200

CVE Reference: CVE-2012-1182 (Links to External Site)

Date: Jun 25 2012

Impact: Execution of arbitrary code via network, Root access via network

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 3.0.x to 3.6.3

Description: A vulnerability was reported in Samba. A remote user can execute arbitrary code on the target system.

A remote user can send a specially crafted RPC call to trigger a buffer overflow in the Network Data Representation (NDR) marshalling code and execute arbitrary code on the target system. The code will run with root privileges.

Impact: A remote user can execute arbitrary code with root privileges on the target system.

Solution: Gentoo has issued a fix.

The Gentoo advisory is available at:

http://security.gentoo.org/glsa/glsa-201206-22.xml

Vendor URL: www.samba.org/samba/history/samba-3.6.4.html (Links to External Site)

Cause: Boundary error

Underlying OS: Linux (Gentoo)

Message History: This archive entry is a follow-up to the message listed below.


[Original Message Not Available for Viewing]