Test ID:	1.3.6.1.4.1.25623.1.0.150728
Category:	General
Title:	Samba < 3.4.0 Remote Code Execution Vulnerability (CVE-2012-0870)
Summary:	Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions.
Description:	Summary: Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions. Vulnerability Insight: Samba versions up to 3.4.0 do not ensure that AndX offsets of the smb daemon (smbd) are increasing strictly monotonically. Therefore a remote code execution vulnerability exists in the smbd service. A remote attacker could use the vulnerability to launch an exploit over a network connection. Affected Software/OS: Samba versions prior to 3.4.0. Solution: Apply the patch mentioned in the linked reference. CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0870 48116 http://secunia.com/advisories/48116 48186 http://secunia.com/advisories/48186 48844 http://secunia.com/advisories/48844 48879 http://secunia.com/advisories/48879 APPLE-SA-2012-05-09-1 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html SUSE-SU-2012:0337 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html SUSE-SU-2012:0338 http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html SUSE-SU-2012:0502 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html SUSE-SU-2012:0515 http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html USN-1374-1 http://www.ubuntu.com/usn/USN-1374-1 blackberry-playbook-samba-code-execution(73361) https://exchange.xforce.ibmcloud.com/vulnerabilities/73361 http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565 http://support.apple.com/kb/HT5281 https://bugzilla.redhat.com/show_bug.cgi?id=795509
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.