SMB: Samba DCE RPC IDL Parser Out-of-bounds Array Access

This signature detects attempts to exploit a known flaw in the open source project Samba. An out-of-bounds array access leading to heap memory corruption has been reported in Samba. The vulnerability is due to an error in Samba's RPC code generator. A remote, unauthenticated attacker could exploit this vulnerability by sending malicious Server Message Block (SMB) traffic to a vulnerable server. A successful exploitation attempt may result in the execution of arbitrary code as the 'root' user.

Extended Description

Samba is prone to a remote-code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will cause a denial-of-service condition. Samba versions 3.0 through 3.6.3 are vulnerable.

Affected Products

Suse suse_linux_enterprise_desktop

References

BugTraq: 52973

CVE: CVE-2012-1182

URL: https://www.samba.org/samba/security/CVE-2012-1182

Short Name

SMB:SAMBA:IDL-PARSE-OOB

Severity

Major

Recommended

False

Recommended Action

Drop

SMB: Samba DCE RPC IDL Parser Out-of-bounds Array Access

Extended Description

Affected Products

References

Found a potential security threat?