FKIE_CVE-2012-0870

Vulnerability from fkie_nvd - Published: 2012-02-23 12:33 - Updated: 2025-04-11 00:51
Severity ?
Summary
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
References
secalert@redhat.comhttp://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565Patch, Vendor Advisory
secalert@redhat.comhttp://lists.apple.com/archives/security-announce/2012/May/msg00001.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
secalert@redhat.comhttp://secunia.com/advisories/48116
secalert@redhat.comhttp://secunia.com/advisories/48186
secalert@redhat.comhttp://secunia.com/advisories/48844
secalert@redhat.comhttp://secunia.com/advisories/48879
secalert@redhat.comhttp://support.apple.com/kb/HT5281
secalert@redhat.comhttp://www.ubuntu.com/usn/USN-1374-1
secalert@redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=795509Patch
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/73361
af854a3a-2127-422b-91ae-364da2661108http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48116
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48186
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48844
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/48879
af854a3a-2127-422b-91ae-364da2661108http://support.apple.com/kb/HT5281
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-1374-1
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=795509Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/73361
Impacted products
Vendor Product Version
samba samba 3.0.0
rim blackberry_playbook_tablet -
rim blackberry_playbook_os *
rim blackberry_playbook_os 1.0
rim blackberry_playbook_os 1.0.3
rim blackberry_playbook_os 1.0.5
rim blackberry_playbook_os 1.0.6
rim blackberry_playbook_os 1.0.7
rim blackberry_playbook_os 1.0.7.2942
rim blackberry_playbook_os 1.0.7.3312
rim blackberry_playbook_os 1.0.8.4985
rim blackberry_playbook_os 1.0.8.6067
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:rim:blackberry_playbook_tablet:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B13D05F4-6644-4154-B5BA-7CC813525037",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0BB30F4-E904-4F79-B5B9-D47D5870EE17",
              "versionEndIncluding": "2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "45C013E5-5F05-4B2D-B421-D19978012845",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE741573-DE54-4C5A-B21D-5AA97E01E596",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "801799C1-E517-46BF-9722-B999979D1B46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1C68670-B8A9-4E18-A786-3DFEF4B96A77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED2C0DEE-008B-4736-89CA-54C72C0C7D25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.2942:*:*:*:*:*:*:*",
              "matchCriteriaId": "59BFBECB-770D-4AAB-995B-61D479760A11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.3312:*:*:*:*:*:*:*",
              "matchCriteriaId": "647E4090-E880-46D5-A5F8-C6A97C77925A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.4985:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1553E67-11B2-4333-B117-101186AA95F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:rim:blackberry_playbook_os:1.0.8.6067:*:*:*:*:*:*:*",
              "matchCriteriaId": "983ECDDB-3568-46B3-818F-1565FC565ADE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de buffer basado en memoria din\u00e1mica (heap) en process.c de smbd en Samba v3.0, tal como se utiliza en el servicio de intercambio de archivos en la tableta BlackBerry PlayBook anterior a v2.0.0.7971 y otros productos, permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda de demonio) o posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de una por lotes (tambi\u00e9n conocido yx) que desencadena la solicitud de repetici\u00f3n infinita"
    }
  ],
  "id": "CVE-2012-0870",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.9,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:A/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 5.5,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-02-23T12:33:55.407",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=KB29565"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48116"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48186"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48844"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48879"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.apple.com/kb/HT5281"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1374-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=795509"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73361"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC\u0026docType=kc\u0026externalId=KB29565"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48116"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48186"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48844"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48879"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT5281"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1374-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=795509"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73361"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.