Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-0240HistoryFeb 24, 2015 - 1:59 a.m.
CVE-2015-0240
2015-02-2401:59:00
Debian Security Bug Tracker
security-tracker.debian.org
29
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | samba | <Β 2:4.1.17+dfsg-1 | samba_2:4.1.17+dfsg-1_all.deb |
| Debian | 11 | all | samba | <Β 2:4.1.17+dfsg-1 | samba_2:4.1.17+dfsg-1_all.deb |
| Debian | 10 | all | samba | <Β 2:4.1.17+dfsg-1 | samba_2:4.1.17+dfsg-1_all.deb |
| Debian | 999 | all | samba | <Β 2:4.1.17+dfsg-1 | samba_2:4.1.17+dfsg-1_all.deb |
| Debian | 13 | all | samba | <Β 2:4.1.17+dfsg-1 | samba_2:4.1.17+dfsg-1_all.deb |
Related
f5
f5
SOL16350 - Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
K16350 : Samba vulnerability CVE-2015-0240
2015-04-02 00:00:00
freebsd
freebsd
samba -- Unexpected code execution in smbd
2015-02-23 00:00:00
nessus
nessus
RHEL 6 : samba4 (RHSA-2015:0255)
2015-02-24 00:00:00
Oracle Linux 7 : samba (ELSA-2015-0252)
2015-02-24 00:00:00
SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2015:0353-1)
2015-05-20 00:00:00
suse
suse
Security update for samba (important)
2015-02-23 16:05:05
Security update for Samba (important)
2015-02-25 08:09:00
Security update for Samba (important)
2015-02-27 11:04:55
openvas
openvas
CentOS Update for libsmbclient CESA-2015:0251 centos6
2015-02-25 00:00:00
RedHat Update for samba4 RHSA-2015:0250-01
2015-02-25 00:00:00
CentOS Update for samba4 CESA-2015:0250 centos6
2015-02-25 00:00:00
centos
centos
samba4 security update
2015-02-23 14:24:03
libsmbclient, samba security update
2015-02-23 14:23:09
samba3x security update
2015-02-23 14:18:15
cisa
cisa
Samba Remote Code Execution Vulnerability
2015-02-24 00:00:00
securityvulns
securityvulns
Samba memory corruption
2015-02-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.1.17-alt1
2015-02-23 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.17-alt1
2015-02-23 00:00:00
Security fix for the ALT Linux 6 package samba version 3.5.22-alt0.M60P.1
2015-02-24 00:00:00
redhat
redhat
(RHSA-2015:0255) Critical: samba4 security update
2015-02-23 00:00:00
(RHSA-2015:0250) Critical: samba4 security update
2015-02-23 00:00:00
(RHSA-2015:0254) Critical: samba security update
2015-02-23 00:00:00
myhack58
myhack58
thn
thn
Samba Service Hit By Remote Code Execution Vulnerability
2015-02-24 00:10:00
fedora
fedora
[SECURITY] Fedora 21 Update: samba-4.1.17-1.fc21
2015-02-25 13:30:51
[SECURITY] Fedora 20 Update: samba-4.1.17-1.fc20
2015-02-25 13:28:25
ubuntucve
ubuntucve
CVE-2015-0240
2015-02-23 00:00:00
debian
debian
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:48:45
[SECURITY] [DLA 156-1] samba security update
2015-02-23 17:00:36
[SECURITY] [DSA 3171-1] samba security update
2015-02-23 11:48:45
ibm
ibm
mageia
mageia
Updated samba packages fix CVE-2015-0240
2015-02-25 00:20:13
cvelist
cvelist
CVE-2015-0240
2015-02-24 01:00:00
metasploit
metasploit
Samba _netr_ServerPasswordSet Uninitialized Credential State
2015-03-05 05:50:14
exploitpack
exploitpack
Samba 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
archlinux
archlinux
samba: arbitrary code execution
2015-02-23 00:00:00
zdt
zdt
Samba < 3.6.2 x86 - PoC
2015-04-15 00:00:00
ubuntu
ubuntu
Samba vulnerability
2015-02-23 00:00:00
samba
samba
Unexpected code execution in smbd.
2015-02-23 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:04:32
prion
prion
Null pointer dereference
2015-02-24 01:59:00
nvd
nvd
CVE-2015-0240
2015-02-24 01:59:00
cve
cve
CVE-2015-0240
2015-02-24 01:59:00
oraclelinux
oraclelinux
samba security update
2015-02-23 00:00:00
samba4 security update
2015-02-23 00:00:00
samba security update
2015-02-23 00:00:00
slackware
slackware
[slackware-security] samba
2015-03-05 22:49:31
seebug
seebug
Samba NetLogonζͺεε§εζιζΌζ΄οΌCVE-2015-0240οΌ
2015-11-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Samba smbd ServerPasswordSet RPC Memory Corruption (CVE-2015-0240)
2015-03-03 00:00:00
lenovo
lenovo
Samba Remote Code Execution Vulnerability - Lenovo Support US
2017-01-23 00:00:00
Samba Remote Code Execution Vulnerability
2017-01-23 00:00:00
osv
osv
samba - security update
2015-02-23 00:00:00
samba - security update
2015-02-23 00:00:00
exploitdb
exploitdb
Samba < 3.6.2 (x86) - Denial of Service (PoC)
2015-04-13 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00
kitploit
kitploit
Jok3R - Network And Web Pentest Framework
2019-01-23 12:25:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for DEBIANCVE:CVE-2015-0240