CVE - CVE - 2015 - 0240

CVE-ID
cve - 2015 - 0240	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
Netlogon smbd Samba 3.5服务器实现。3.6 x和。4.0 x 3.6.25之前,。4.1 x 4.0.25之前,。4.1.17前x,和4.2。x 4.2.0rc5之前执行一个免费的操作在未初始化堆栈指针,它允许远程攻击者通过精心Netlogon数据包执行任意代码,使用ServerPasswordSet RPC API,所展示的数据包到达_netr_ServerPasswordSet函数rpc_server / Netlogon / srv_netlog_nt.c。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
MISC: 1031783 URL: http://www.securitytracker.com/id/1031783 MISC: 36741 URL: https://www.exploit-db.com/exploits/36741/ MISC: 72711 URL: http://www.securityfocus.com/bid/72711 MISC: dsa - 3171 URL: http://www.debian.org/security/2015/dsa - 3171 MISC: glsa - 201502 - 15所示 URL: http://security.gentoo.org/glsa/glsa - 201502 - 15. - xml MISC: HPSBGN03288 URL: http://marc.info/?l=bugtraq&m=142722696102151&w=2 MISC: HPSBUX03320 URL: http://marc.info/?l=bugtraq&m=143039217203031&w=2 MISC: MDVSA-2015:081 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:081~~(过时的来源) MISC: MDVSA-2015:082 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:082~~(过时的来源) MISC: RHSA-2015:0249 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0249. - html MISC: RHSA-2015:0250 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0250. - html MISC: RHSA-2015:0251 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0251. - html MISC: RHSA-2015:0252 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0252. - html MISC: RHSA-2015:0253 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0253. - html MISC: RHSA-2015:0254 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0254. - html MISC: RHSA-2015:0255 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0255. - html MISC: RHSA-2015:0256 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0256. - html MISC: RHSA-2015:0257 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0257. - html MISC: SSA: 2015-064-01 URL: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360345 MISC: SSRT101952 URL: http://marc.info/?l=bugtraq&m=143039217203031&w=2 MISC: SSRT101979 URL: http://marc.info/?l=bugtraq&m=142722696102151&w=2 MISC: SUSE-SU-2015:0353 URL: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html MISC: SUSE-SU-2015:0371 URL: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html MISC: SUSE-SU-2015:0386 URL: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html MISC: usn - 2508 - 1 URL: http://www.ubuntu.com/usn/usn - 2508 - 1 MISC: http://advisories.mageia.org/mgasa - 2015 - 0084. - html URL: http://advisories.mageia.org/mgasa - 2015 - 0084. - html MISC: http://www.oracle.com/technetwork/topics/security/bulletinjan2015 - 2370101. - html URL: http://www.oracle.com/technetwork/topics/security/bulletinjan2015 - 2370101. - html MISC: https://access.redhat.com/articles/1346913 URL: https://access.redhat.com/articles/1346913 MISC: https://bugzilla.redhat.com/show_bug.cgi?id=1191325 URL: https://bugzilla.redhat.com/show_bug.cgi?id=1191325 MISC: https://securityblog.redhat.com/2015/02/23/samba cve - 2015 0240/——脆弱性 URL: https://securityblog.redhat.com/2015/02/23/samba cve - 2015 0240/——脆弱性 MISC: https://support.lenovo.com/product_security/samba_remote_vuln URL: https://support.lenovo.com/product_security/samba_remote_vuln MISC: https://support.lenovo.com/us/en/product_security/samba_remote_vuln URL: https://support.lenovo.com/us/en/product_security/samba_remote_vuln MISC: https://www.samba.org/samba/security/cve - 2015 - 0240 URL: https://www.samba.org/samba/security/cve - 2015 - 0240 MISC: openSUSE-SU-2015:0375 URL: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html MISC: openSUSE-SU-2016:1064 URL: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html MISC: openSUSE-SU-2016:1106 URL: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html MISC: openSUSE-SU-2016:1107 URL: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
分配中央社
红帽公司。
创建日期记录
20141118	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20141118)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2015 - 0240