CVE-2012-0870

CVSS V2 High 7.9 CVSS V3 None

Description

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

Overview

CVE ID
CVE-2012-0870

Assigner
secalert@redhat.com

Vulnerability Status
Modified

Published Version
2012-02-23T12:33:55

Last Modified Date
2023-02-13T04:32:52

Weakness Enumerations

CWE	URL
CWE-119	http://cwe.mitre.org/data/definitions/119.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version End
cpe:2.3:a:samba:samba:3.0.0:::::::*	1	OR
cpe:2.3:h:rim:blackberry_playbook_tablet:-:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os::::::::	1	OR	2.0
cpe:2.3:o:rim:blackberry_playbook_os:1.0:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.3:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.5:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.6:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.2942:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.3312:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.4985:::::::*	1	OR
cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.6067:::::::*	1	OR

CVSS Version 2

Version
2.0

Vector String
AV:A/AC:M/Au:N/C:C/I:C/A:C

Access Vector
ADJACENT_NETWORK

Access Compatibility
MEDIUM

Authentication
NONE

Confidentiality Impact
COMPLETE

Integrity Impact
COMPLETE

Availability Impact
COMPLETE

Base Score
7.9

Severity
HIGH

Exploitability Score
5.5

Impact Score
10

References

Reference URL	Reference Tags
http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565	Patch Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=795509	Patch
http://secunia.com/advisories/48116
http://secunia.com/advisories/48186
http://www.ubuntu.com/usn/USN-1374-1
http://support.apple.com/kb/HT5281
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://secunia.com/advisories/48844
http://secunia.com/advisories/48879
https://exchange.xforce.ibmcloud.com/vulnerabilities/73361
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2012-0870
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 18:02:27				Added to TrackCVE
2023-02-02 19:03:22		2023-02-02T18:15:35	CVE Modified Date	updated
2023-02-02 19:03:23	Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.	CVE-2012-0870 samba: Any Batched ("AndX") request processing infinite recursion and heap-based buffer overflow	Description	updated
2023-02-13 05:04:39		2023-02-13T04:32:52	CVE Modified Date	updated
2023-02-13 05:04:39	CVE-2012-0870 samba: Any Batched ("AndX") request processing infinite recursion and heap-based buffer overflow	Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.	Description	updated