PT-2013-1043 · Samba+5 · Samba+5

Michael Adam + 1 · Published 2013-12-09 · Updated 2024-06-15 · CVE-2013-4408

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba versions 3.x through 3.6.21 Samba versions 4.0.x through 4.0.12 Samba versions 4.1.x through 4.1.2

Description The issue allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet. This is due to a heap-based buffer overflow in the dcerpc read ncacn packet done function in librpc/rpc/dcerpc util.c in winbindd.

Recommendations For Samba versions 3.x through 3.6.21, update to version 3.6.22 or later. For Samba versions 4.0.x through 4.0.12, update to version 4.0.13 or later. For Samba versions 4.1.x through 4.1.2, update to version 4.1.3 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2013-1265

BDU:2015-00382

CESA-2013_1805

CESA-2013_1806

CVE-2013-4408

DSA-2812-1

ECHO-34E0-1882-01C5

HPSBUX03087

MGASA-2013-0369

OPENSUSE-SU-2016_1106-1

OPENSUSE-SU-2024:10069-1

RHSA-2013:1805

RHSA-2013:1806

RHSA-2013_1805

RHSA-2013_1806

RHSA-2014:0009

SUSE-SU-2015:0386-1

USN-2054-1

Affected Products

Alt Linux

Centos

Hp-Ux

Red Hat

Samba

Suse

References · 92

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/samba/read_nttrans_ea_list.rb · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1805.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-1806.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4408 · Security Note
• https://ubuntu.com/security/CVE-2013-4408 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2054-1 · Vendor Advisory
• http://debian.org/security/2013/dsa-2812 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201502-15.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00382 · Security Note
• https://linux.oracle.com/errata/ELSA-2013-1805.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0009.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0369 · Vendor Advisory