NVD

Id
43960  
Name
CVE-2012-2111  
Description
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-04-30  
Modified Date
2013-01-29  
Seq
2012-2111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220867 43960 CVE-2012-2111 FEDORA-2012-6981  View
220868 43960 CVE-2012-2111 FEDORA-2012-6999  View
220869 43960 CVE-2012-2111 FEDORA-2012-7006  View
220870 43960 CVE-2012-2111 SUSE-SU-2012:0573  View
220871 43960 CVE-2012-2111 openSUSE-SU-2012:0583  View
220872 43960 CVE-2012-2111 SUSE-SU-2012:0591  View
220873 43960 CVE-2012-2111 SSRT100824  View
220874 43960 CVE-2012-2111 RHSA-2012:0533  View
220875 43960 CVE-2012-2111 http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578  View
220876 43960 CVE-2012-2111 DSA-2463  View
220877 43960 CVE-2012-2111 http://www.samba.org/samba/security/CVE-2012-2111  View
220878 43960 CVE-2012-2111 1026988  View
220879 43960 CVE-2012-2111 USN-1434-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26472 JVNDB-2012-002179 Samba における Take Ownership 権限を取得される脆弱性 Samba の smbd 内の (1) CreateAccount、(2) OpenAccount、(3) AddAccountRights、および (4) RemoveAccountRights の LSA RPC プロシージャは、権限データベースの変更を適切に制限しないため、Take Ownership (ファイルやフォルダの所有権を取得できる) 権限を取得される脆弱性が存在します。 CVE-2012-2111 55349 CVE-2012-2111 43960 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002179.html 2012-04-30 2012-09-04 View