Wind River Support Network

HomeDefectsLIN7-3000
Fixed

LIN7-3000 : Security Advisory - samba - CVE-2015-0240

Created: Feb 25, 2015    Updated: Sep 8, 2018
Resolved Date: Feb 27, 2015
Found In Version: 7.0
Fix Version: 7.0.0.3
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0240

Other Downloads


CVEs


Live chat
Online