Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0240
HistoryFeb 24, 2015 - 1:59 a.m.

CVE-2015-0240

2015-02-2401:59:00
CWE-17
[email protected]
web.nvd.nist.gov
189
cve-2015-0240
samba
remote code execution
netlogon
security vulnerability
nvd

8.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch5
OR
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
Node
sambasambaMatch3.5.0
OR
sambasambaMatch3.5.1
OR
sambasambaMatch3.5.2
OR
sambasambaMatch3.5.3
OR
sambasambaMatch3.5.4
OR
sambasambaMatch3.5.5
OR
sambasambaMatch3.5.6
OR
sambasambaMatch3.5.7
OR
sambasambaMatch3.5.8
OR
sambasambaMatch3.5.9
OR
sambasambaMatch3.5.10
OR
sambasambaMatch3.5.11
OR
sambasambaMatch3.5.12
OR
sambasambaMatch3.5.13
OR
sambasambaMatch3.5.14
OR
sambasambaMatch3.5.15
OR
sambasambaMatch3.5.16
OR
sambasambaMatch3.5.17
OR
sambasambaMatch3.5.18
OR
sambasambaMatch3.5.19
OR
sambasambaMatch3.5.20
OR
sambasambaMatch3.5.21
OR
sambasambaMatch3.5.22
OR
sambasambaMatch3.6.0
OR
sambasambaMatch3.6.1
OR
sambasambaMatch3.6.2
OR
sambasambaMatch3.6.10
OR
sambasambaMatch3.6.11
OR
sambasambaMatch3.6.12
OR
sambasambaMatch3.6.13
OR
sambasambaMatch3.6.14
OR
sambasambaMatch3.6.15
OR
sambasambaMatch3.6.16
OR
sambasambaMatch3.6.17
OR
sambasambaMatch3.6.18
OR
sambasambaMatch3.6.19
OR
sambasambaMatch3.6.20
OR
sambasambaMatch3.6.21
OR
sambasambaMatch3.6.22
OR
sambasambaMatch3.6.23
OR
sambasambaMatch3.6.24
OR
sambasambaMatch4.0.0
OR
sambasambaMatch4.0.1
OR
sambasambaMatch4.0.2
OR
sambasambaMatch4.0.3
OR
sambasambaMatch4.0.4
OR
sambasambaMatch4.0.5
OR
sambasambaMatch4.0.6
OR
sambasambaMatch4.0.7
OR
sambasambaMatch4.0.8
OR
sambasambaMatch4.0.9
OR
sambasambaMatch4.0.10
OR
sambasambaMatch4.0.11
OR
sambasambaMatch4.0.12
OR
sambasambaMatch4.0.13
OR
sambasambaMatch4.0.14
OR
sambasambaMatch4.0.15
OR
sambasambaMatch4.0.16
OR
sambasambaMatch4.0.17
OR
sambasambaMatch4.0.18
OR
sambasambaMatch4.0.19
OR
sambasambaMatch4.0.20
OR
sambasambaMatch4.0.21
OR
sambasambaMatch4.0.22
OR
sambasambaMatch4.0.23
OR
sambasambaMatch4.0.24
OR
sambasambaMatch4.1.0
OR
sambasambaMatch4.1.1
OR
sambasambaMatch4.1.2
OR
sambasambaMatch4.1.3
OR
sambasambaMatch4.1.4
OR
sambasambaMatch4.1.5
OR
sambasambaMatch4.1.6
OR
sambasambaMatch4.1.7
OR
sambasambaMatch4.1.8
OR
sambasambaMatch4.1.9
OR
sambasambaMatch4.1.10
OR
sambasambaMatch4.1.11
OR
sambasambaMatch4.1.12
OR
sambasambaMatch4.1.13
OR
sambasambaMatch4.1.14
OR
sambasambaMatch4.1.15
OR
sambasambaMatch4.1.16
OR
sambasambaMatch4.2.0rc1
OR
sambasambaMatch4.2.0rc2
OR
sambasambaMatch4.2.0rc3
OR
sambasambaMatch4.2.0rc4
Node
novellsuse_linux_enterprise_desktopMatch12
OR
novellsuse_linux_enterprise_serverMatch12
OR
novellsuse_linux_enterprise_software_development_kitMatch12
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10

References

Related

f5 2
securityvulns 1
altlinux 4
cisa 1
suse 7
openvas 31
nessus 38
centos 4
debiancve 1
freebsd 1
oraclelinux 5
redhat 9
slackware 1
seebug 1
debian 3
prion 1
veracode 1
archlinux 1
ubuntu 1
samba 1
zdt 1
nvd 1
ibm 2
checkpoint_advisories 1
lenovo 2
osv 2
thn 1
fedora 2
myhack58 1
ubuntucve 1
mageia 1
metasploit 1
cvelist 1
exploitpack 1
exploitdb 1
gentoo 1
kitploit 1
f5
f5
SOL16350 - Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
K16350 : Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
securityvulns
securityvulns
Samba memory corruption
2015-02-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.1.17-alt1
2015-02-23 00:00:00
Security fix for the ALT Linux 6 package samba version 3.5.22-alt0.M60P.1
2015-02-24 00:00:00
Security fix for the ALT Linux 8 package samba version 4.1.17-alt1
2015-02-23 00:00:00
cisa
cisa
Samba Remote Code Execution Vulnerability
2015-02-24 00:00:00
suse
suse
Security update for samba (important)
2015-02-23 16:05:05
Security update for Samba (important)
2015-02-25 08:09:00
Security update for Samba (important)
2015-02-27 11:04:55
openvas
openvas
Debian: Security Advisory (DLA-156-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3171-1)
2015-02-22 00:00:00
RedHat Update for samba4 RHSA-2015:0250-01
2015-02-25 00:00:00
nessus
nessus
Fedora 21 : samba-4.1.17-1.fc21 (2015-2538)
2015-02-26 00:00:00
Oracle Linux 7 : samba (ELSA-2015-0252)
2015-02-24 00:00:00
RHEL 6 : samba4 (RHSA-2015:0255)
2015-02-24 00:00:00
centos
centos
samba4 security update
2015-02-23 14:24:03
samba3x security update
2015-02-23 14:18:15
libsmbclient, libwbclient, samba security update
2015-02-23 14:35:15
debiancve
debiancve
CVE-2015-0240
2015-02-24 01:59:00
freebsd
freebsd
samba -- Unexpected code execution in smbd
2015-02-23 00:00:00
oraclelinux
oraclelinux
samba4 security update
2015-02-23 00:00:00
samba security update
2015-02-23 00:00:00
samba3x security update
2015-02-23 00:00:00
redhat
redhat
(RHSA-2015:0257) Critical: samba security update
2015-02-23 00:00:00
(RHSA-2015:0252) Important: samba security update
2015-02-23 00:00:00
(RHSA-2015:0254) Critical: samba security update
2015-02-23 00:00:00
slackware
slackware
[slackware-security] samba
2015-03-05 22:49:31
seebug
seebug
Samba NetLogon未初始化指针漏洞（CVE-2015-0240）
2015-11-13 00:00:00
debian
debian
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:49:04
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:48:45
[SECURITY] [DLA 156-1] samba security update
2015-02-23 17:00:59
prion
prion
Null pointer dereference
2015-02-24 01:59:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:04:32
archlinux
archlinux
samba: arbitrary code execution
2015-02-23 00:00:00
ubuntu
ubuntu
Samba vulnerability
2015-02-23 00:00:00
samba
samba
Unexpected code execution in smbd.
2015-02-23 00:00:00
zdt
zdt
Samba < 3.6.2 x86 - PoC
2015-04-15 00:00:00
nvd
nvd
CVE-2015-0240
2015-02-24 01:59:00
ibm
ibm
Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2015-0240)
2018-06-18 00:09:17
Security Bulletin: Samba vulnerability issue on IBM SONAS (CVE-2015-0240)
2018-06-18 00:09:22
checkpoint_advisories
checkpoint_advisories
Samba smbd ServerPasswordSet RPC Memory Corruption (CVE-2015-0240)
2015-03-03 00:00:00
lenovo
lenovo
Samba Remote Code Execution Vulnerability - Lenovo Support US
2017-01-23 00:00:00
Samba Remote Code Execution Vulnerability
2017-01-23 00:00:00
osv
osv
samba - security update
2015-02-23 00:00:00
samba - security update
2015-02-23 00:00:00
thn
thn
Samba Service Hit By Remote Code Execution Vulnerability
2015-02-24 00:10:00
fedora
fedora
[SECURITY] Fedora 21 Update: samba-4.1.17-1.fc21
2015-02-25 13:30:51
[SECURITY] Fedora 20 Update: samba-4.1.17-1.fc20
2015-02-25 13:28:25
myhack58
myhack58
Samba CVE-2 0 1 5-0 2 4 0 remote code execution exploit practice-vulnerability warning-the black bar safety net
2015-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2015-0240
2015-02-23 00:00:00
mageia
mageia
Updated samba packages fix CVE-2015-0240
2015-02-25 00:20:13
metasploit
metasploit
Samba _netr_ServerPasswordSet Uninitialized Credential State
2015-03-05 05:50:14
cvelist
cvelist
CVE-2015-0240
2015-02-24 01:00:00
exploitpack
exploitpack
Samba 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
exploitdb
exploitdb
Samba &lt; 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00
kitploit
kitploit
Jok3R - Network And Web Pentest Framework
2019-01-23 12:25:00

8.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2015-0240
f52securityvulns1altlinux4cisa1suse7openvas31nessus38centos4debiancve1freebsd1oraclelinux5redhat9slackware1seebug1debian3prion1veracode1archlinux1ubuntu1samba1zdt1nvd1ibm2checkpoint_advisories1lenovo2osv2thn1fedora2myhack581ubuntucve1mageia1metasploit1cvelist1exploitpack1exploitdb1gentoo1kitploit1