CVE ID:	CVE-2012-2111
Description:	The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
Test IDs:	1.3.6.1.4.1.25623.1.0.864370   1.3.6.1.4.1.25623.1.0.150738   1.3.6.1.4.1.25623.1.1.4.2012.0591.1   1.3.6.1.4.1.25623.1.0.71340   1.3.6.1.4.1.25623.1.0.881060   1.3.6.1.4.1.25623.1.0.864406   1.3.6.1.4.1.25623.1.0.123927   1.3.6.1.4.1.25623.1.0.864398   1.3.6.1.4.1.25623.1.0.71222   1.3.6.1.4.1.25623.1.0.72046   1.3.6.1.4.1.25623.1.0.72255   1.3.6.1.4.1.25623.1.0.71667   1.3.6.1.4.1.25623.1.1.4.2012.0573.1   1.3.6.1.4.1.25623.1.0.870590   1.3.6.1.4.1.25623.1.0.840998   1.3.6.1.4.1.25623.1.0.831570   1.3.6.1.4.1.25623.1.0.864422   1.3.6.1.4.1.25623.1.0.850252   1.3.6.1.4.1.25623.1.0.881081   1.3.6.1.4.1.25623.1.0.71266
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2111 1026988 http://www.securitytracker.com/id?1026988 48976 http://secunia.com/advisories/48976 48984 http://secunia.com/advisories/48984 48996 http://secunia.com/advisories/48996 48999 http://secunia.com/advisories/48999 49017 http://secunia.com/advisories/49017 49030 http://secunia.com/advisories/49030 81648 http://osvdb.org/81648 DSA-2463 http://www.debian.org/security/2012/dsa-2463 FEDORA-2012-6981 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html FEDORA-2012-6999 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html FEDORA-2012-7006 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html HPSBUX02789 http://marc.info/?l=bugtraq&m=134323086902585&w=2 MDVSA-2012:067 http://www.mandriva.com/security/advisories?name=MDVSA-2012:067 RHSA-2012:0533 http://rhn.redhat.com/errata/RHSA-2012-0533.html SSRT100824 http://marc.info/?l=bugtraq&m=134323086902585&w=2 SUSE-SU-2012:0573 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html SUSE-SU-2012:0591 http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html USN-1434-1 http://www.ubuntu.com/usn/USN-1434-1 http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578 http://www.samba.org/samba/security/CVE-2012-2111 http://www.samba.org/samba/security/CVE-2012-2111 openSUSE-SU-2012:0583 http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html