PT-2013-1045 · Alt Linux Team+7 · Alt Linux+5

Kim Olsen · Published 2013-12-03 · Updated 2024-06-15 · CVE-2012-6150

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:N/AC:H/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.1.2 Red Hat Enterprise Linux (affected versions not specified) CentOS (affected versions not specified) ALT Linux (affected versions not specified)

Description The issue is related to the handling of invalid group names in the winbind name list to sid string list function, which can allow remote authenticated users to bypass access restrictions. This can lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerability exists due to the acceptance of authentication by any user when there is a mistake in the pam winbind configuration file.

Recommendations For Samba versions prior to 4.1.2: Update to a version later than 4.1.2 to resolve the issue. For Red Hat Enterprise Linux: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For CentOS: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For ALT Linux: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2013-1265

BDU:2015-00390

BDU:2015-06049

BDU:2015-08932

CESA-2014_0330

CESA-2014_0383

CVE-2012-6150

ECHO-27A0-7E44-CD1F

HPSBUX03087

MGASA-2013-0369

OPENSUSE-SU-2016_1106-1

OPENSUSE-SU-2024:10069-1

RHSA-2014:0330

RHSA-2014:0383

RHSA-2014_0330

RHSA-2014_0383

SUSE-SU-2014_0024-1

SUSE-SU-2014_0723-1

SUSE-SU-2015:0386-1

USN-2054-1

Affected Products

Alt Linux

Centos

Hp-Ux

Red Hat

Samba

Suse

References · 97

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/samba/read_nttrans_ea_list.rb · Exploit
• 🔥 https://lists.samba.org/archive/samba-technical/2013-November/096411.html · Exploit
• 🔥 https://lists.samba.org/archive/samba-technical/2012-June/084593.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6150 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150 · Security Note
• https://ubuntu.com/security/CVE-2012-6150 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2054-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2014-0383.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201502-15.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06049 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-6150 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-6150 · Security Note
• https://bugzilla.samba.org/show_bug.cgi?id=10300 · Patch