CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2111

The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.4%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2012-2111

Samba » Samba » Version: 3.4.0

cpe:2.3:a:samba:samba:3.4.0
Samba » Samba » Version: 3.4.1

cpe:2.3:a:samba:samba:3.4.1
Samba » Samba » Version: 3.4.10

cpe:2.3:a:samba:samba:3.4.10
Samba » Samba » Version: 3.4.11

cpe:2.3:a:samba:samba:3.4.11
Samba » Samba » Version: 3.4.12

cpe:2.3:a:samba:samba:3.4.12
Samba » Samba » Version: 3.4.13

cpe:2.3:a:samba:samba:3.4.13
Samba » Samba » Version: 3.4.14

cpe:2.3:a:samba:samba:3.4.14
Samba » Samba » Version: 3.4.15

cpe:2.3:a:samba:samba:3.4.15
Samba » Samba » Version: 3.4.16

cpe:2.3:a:samba:samba:3.4.16
Samba » Samba » Version: 3.4.2

cpe:2.3:a:samba:samba:3.4.2
Samba » Samba » Version: 3.4.3

cpe:2.3:a:samba:samba:3.4.3
Samba » Samba » Version: 3.4.4

cpe:2.3:a:samba:samba:3.4.4
Samba » Samba » Version: 3.4.5

cpe:2.3:a:samba:samba:3.4.5
Samba » Samba » Version: 3.4.6

cpe:2.3:a:samba:samba:3.4.6
Samba » Samba » Version: 3.4.7

cpe:2.3:a:samba:samba:3.4.7
Samba » Samba » Version: 3.4.8

cpe:2.3:a:samba:samba:3.4.8
Samba » Samba » Version: 3.4.9

cpe:2.3:a:samba:samba:3.4.9
Samba » Samba » Version: 3.5.0

cpe:2.3:a:samba:samba:3.5.0
Samba » Samba » Version: 3.5.1

cpe:2.3:a:samba:samba:3.5.1
Samba » Samba » Version: 3.5.10

cpe:2.3:a:samba:samba:3.5.10
Samba » Samba » Version: 3.5.11

cpe:2.3:a:samba:samba:3.5.11
Samba » Samba » Version: 3.5.12

cpe:2.3:a:samba:samba:3.5.12
Samba » Samba » Version: 3.5.13

cpe:2.3:a:samba:samba:3.5.13
Samba » Samba » Version: 3.5.14

cpe:2.3:a:samba:samba:3.5.14
Samba » Samba » Version: 3.5.2

cpe:2.3:a:samba:samba:3.5.2
Samba » Samba » Version: 3.5.3

cpe:2.3:a:samba:samba:3.5.3
Samba » Samba » Version: 3.5.4

cpe:2.3:a:samba:samba:3.5.4
Samba » Samba » Version: 3.5.5

cpe:2.3:a:samba:samba:3.5.5
Samba » Samba » Version: 3.5.6

cpe:2.3:a:samba:samba:3.5.6
Samba » Samba » Version: 3.5.7

cpe:2.3:a:samba:samba:3.5.7
Samba » Samba » Version: 3.5.8

cpe:2.3:a:samba:samba:3.5.8
Samba » Samba » Version: 3.5.9

cpe:2.3:a:samba:samba:3.5.9
Samba » Samba » Version: 3.6.0

cpe:2.3:a:samba:samba:3.6.0
Samba » Samba » Version: 3.6.1

cpe:2.3:a:samba:samba:3.6.1
Samba » Samba » Version: 3.6.2

cpe:2.3:a:samba:samba:3.6.2
Samba » Samba » Version: 3.6.3

cpe:2.3:a:samba:samba:3.6.3
Samba » Samba » Version: 3.6.4

cpe:2.3:a:samba:samba:3.6.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-2111

Products

Pricing

Contact Us