Ubuntu.comUB:CVE-2012-0870CVE-2012-0870
7.9 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
0.959 High
EPSS
Percentile
99.4%
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in
the file-sharing service on the BlackBerry PlayBook tablet before
2.0.0.7971 and other products, allows remote attackers to cause a denial of
service (daemon crash) or possibly execute arbitrary code via a Batched
(aka AndX) request that triggers infinite recursion.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=795509>
- <https://access.redhat.com/security/cve/CVE-2012-0870>
Notes
| Author | Note |
|---|---|
| mdeslaur | only affects samba < 3.4.0 |
References
btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565
www.samba.org/samba/security/CVE-2012-0870.html
www.securityfocus.com/bid/52103
launchpad.net/bugs/cve/CVE-2012-0870
nvd.nist.gov/vuln/detail/CVE-2012-0870
security-tracker.debian.org/tracker/CVE-2012-0870
ubuntu.com/security/notices/USN-1374-1
www.cve.org/CVERecord?id=CVE-2012-0870
Related
7.9 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
0.959 High
EPSS
Percentile
99.4%