CVE-2015-0240

Published: Feb 24, 2015Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Affected (96)

Products: Redhat: Enterprise Linux · Samba: Samba · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit · +1 more

Show all products

Redhat: Enterprise Linux · Samba: Samba · Novell: Suse Linux Enterprise Desktop, Suse Linux Enterprise Server, Suse Linux Enterprise Software Development Kit · Canonical: Ubuntu Linux

1 product

1 product

3 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Suse Linux Enterprise Software Development Kit

Canonical

1 product

Ubuntu Linux

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration B

87 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.5.0
Samba Samba	Version 3.5.10
Samba Samba	Version 3.5.11
Samba Samba	Version 3.5.12
Samba Samba	Version 3.5.13
Samba Samba	Version 3.5.14
Samba Samba	Version 3.5.15
Samba Samba	Version 3.5.16
Samba Samba	Version 3.5.17
Samba Samba	Version 3.5.18
Samba Samba	Version 3.5.19
Samba Samba	Version 3.5.1
Samba Samba	Version 3.5.20
Samba Samba	Version 3.5.21
Samba Samba	Version 3.5.22
Samba Samba	Version 3.5.2
Samba Samba	Version 3.5.3
Samba Samba	Version 3.5.4
Samba Samba	Version 3.5.5
Samba Samba	Version 3.5.6
Samba Samba	Version 3.5.7
Samba Samba	Version 3.5.8
Samba Samba	Version 3.5.9
Samba Samba	Version 3.6.0
Samba Samba	Version 3.6.10
Samba Samba	Version 3.6.11
Samba Samba	Version 3.6.12
Samba Samba	Version 3.6.13
Samba Samba	Version 3.6.14
Samba Samba	Version 3.6.15
Samba Samba	Version 3.6.16
Samba Samba	Version 3.6.17
Samba Samba	Version 3.6.18
Samba Samba	Version 3.6.19
Samba Samba	Version 3.6.1
Samba Samba	Version 3.6.20
Samba Samba	Version 3.6.21
Samba Samba	Version 3.6.22
Samba Samba	Version 3.6.23
Samba Samba	Version 3.6.24
Samba Samba	Version 3.6.2
Samba Samba	Version 4.0.0
Samba Samba	Version 4.0.10
Samba Samba	Version 4.0.11
Samba Samba	Version 4.0.12
Samba Samba	Version 4.0.13
Samba Samba	Version 4.0.14
Samba Samba	Version 4.0.15
Samba Samba	Version 4.0.16
Samba Samba	Version 4.0.17
Samba Samba	Version 4.0.18
Samba Samba	Version 4.0.19
Samba Samba	Version 4.0.1
Samba Samba	Version 4.0.20
Samba Samba	Version 4.0.21
Samba Samba	Version 4.0.22
Samba Samba	Version 4.0.23
Samba Samba	Version 4.0.24
Samba Samba	Version 4.0.2
Samba Samba	Version 4.0.3
Samba Samba	Version 4.0.4
Samba Samba	Version 4.0.5
Samba Samba	Version 4.0.6
Samba Samba	Version 4.0.7
Samba Samba	Version 4.0.8
Samba Samba	Version 4.0.9
Samba Samba	Version 4.1.0
Samba Samba	Version 4.1.10
Samba Samba	Version 4.1.11
Samba Samba	Version 4.1.12
Samba Samba	Version 4.1.13
Samba Samba	Version 4.1.14
Samba Samba	Version 4.1.15
Samba Samba	Version 4.1.16
Samba Samba	Version 4.1.1
Samba Samba	Version 4.1.2
Samba Samba	Version 4.1.3
Samba Samba	Version 4.1.4
Samba Samba	Version 4.1.5
Samba Samba	Version 4.1.6
Samba Samba	Version 4.1.7
Samba Samba	Version 4.1.8
Samba Samba	Version 4.1.9
Samba Samba	Version 4.2.0 rc1
Samba Samba	Version 4.2.0 rc2
Samba Samba	Version 4.2.0 rc3
Samba Samba	Version 4.2.0 rc4

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux Enterprise Desktop	Version 12
Novell Suse Linux Enterprise Server	Version 12
Novell Suse Linux Enterprise Software Development Kit	Version 12

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

Related CWEs

CWE-17

References (71)

http://advisories.mageia.org/MGASA-2015-0084.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142722696102151&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=143039217203031&w=2

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0249.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0250.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0251.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0252.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0253.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0254.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0255.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0256.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0257.html

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201502-15.xml

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3171

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:081

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/72711

Source: secalert@redhat.com

http://www.securitytracker.com/id/1031783

Source: secalert@redhat.com

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360345

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2508-1

Source: secalert@redhat.com

https://access.redhat.com/articles/1346913

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1191325

Source: secalert@redhat.com

https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

Source: secalert@redhat.com

Exploit

https://support.lenovo.com/product_security/samba_remote_vuln

Source: secalert@redhat.com

https://support.lenovo.com/us/en/product_security/samba_remote_vuln

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/36741/

Source: secalert@redhat.com

https://www.samba.org/samba/security/CVE-2015-0240

Source: secalert@redhat.com

Vendor Advisory

http://advisories.mageia.org/MGASA-2015-0084.html