The vulnerability of the _netr_ServerPasswordSet function in the Samba networking communication software package allows a hacker to execute arbitrary code with administrator privileges.

Samba vulnerability in _netr_ServerPasswordSet enables remote code execution by administrators.

Reporter	Title	Published	Views	Family All 166
0day.today	Samba < 3.6.2 x86 - PoC	15 Apr 201500:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package samba version 4.1.17-alt1	23 Feb 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package samba-DC version 4.1.17-alt1	23 Feb 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package samba version 3.5.22-alt0.M60P.1	24 Feb 201500:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package samba version 4.1.17-alt1	23 Feb 201500:00	–	altlinux
Tenable Nessus	Samba 3.5.x / 3.6.x < 3.6.25 / 4.0.x < 4.0.25 / 4.1.x < 4.1.17 / 4.2.x < 4.2rc5 TALLOC_FREE() RCE	8 May 201500:00	–	nessus
Tenable Nessus	CentOS 5 : samba3x (CESA-2015:0249)	24 Feb 201500:00	–	nessus
Tenable Nessus	CentOS 6 : samba4 (CESA-2015:0250)	24 Feb 201500:00	–	nessus
Tenable Nessus	CentOS 6 : samba (CESA-2015:0251)	24 Feb 201500:00	–	nessus
Tenable Nessus	CentOS 7 : samba (CESA-2015:0252)	24 Feb 201500:00	–	nessus

Vulners

Node

samba sambaRange3.5.10–3.5.22

samba sambaRange3.6.0–3.6.25

samba sambaRange4.0.0–4.0.25

samba sambaRange4.1.0–4.1.17

Source	Link
samba	www.samba.org/samba/security/CVE-2015-0240
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-0240
security-tracker	www.security-tracker.debian.org/tracker/CVE-2015-0240
securityblog	www.securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/
lists	www.lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

29 Mar 2021 00:00Current

8High risk

Vulners AI Score8

CVSS 210

CVSS 310

EPSS0.90696