PT-2013-1043 · Samba+5 · Samba+5

Michael Adam + 1 · Publicado 2013-12-09 · Atualizado 2024-06-15 · CVE-2013-4408

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba versions 3.x through 3.6.21 Samba versions 4.0.x through 4.0.12 Samba versions 4.1.x through 4.1.2

Description The issue allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet. This is due to a heap-based buffer overflow in the dcerpc read ncacn packet done function in librpc/rpc/dcerpc util.c in winbindd.

Recommendations For Samba versions 3.x through 3.6.21, update to version 3.6.22 or later. For Samba versions 4.0.x through 4.0.12, update to version 4.0.13 or later. For Samba versions 4.1.x through 4.1.2, update to version 4.1.3 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2013-1265

BDU:2015-00382

CESA-2013_1805

CESA-2013_1806

CVE-2013-4408

DSA-2812-1

ECHO-34E0-1882-01C5

HPSBUX03087

MGASA-2013-0369

OPENSUSE-SU-2016_1106-1

OPENSUSE-SU-2024:10069-1

RHSA-2013:1805

RHSA-2013:1806

RHSA-2013_1805

RHSA-2013_1806

RHSA-2014:0009

SUSE-SU-2015:0386-1

USN-2054-1

Produtos afetados

Alt Linux

Centos

Hp-Ux

Red Hat

Samba

Suse

Referências · 92

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/samba/read_nttrans_ea_list.rb · Exploit
• https://suse.com/security/cve/CVE-2015-5370 · Nota
• https://suse.com/security/cve/CVE-2009-2813 · Nota
• https://suse.com/security/cve/CVE-2009-2948 · Nota
• https://suse.com/security/cve/CVE-2013-4408 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-1805.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-0870 · Nota
• https://suse.com/security/cve/CVE-2014-3560 · Nota
• https://suse.com/security/cve/CVE-2013-0214 · Nota
• https://suse.com/security/cve/CVE-2011-0719 · Nota
• https://suse.com/security/cve/CVE-2016-2115 · Nota
• https://linux.oracle.com/errata/ELSA-2013-1806.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-4408 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-5299 · Nota