Home > Vulnerability Database > CVE-2015-0240

Mend.io Vulnerability Database

CVE-2015-0240

Date: February 23, 2015

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.

Language: C

Severity Score

9.8

Related Resources (41)

Url: https://access.redhat.com/security/cve/CVE-2015-0240

Url: http://rhn.redhat.com/errata/RHSA-2015-0253.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0250.html

Url: https://www.samba.org/samba/security/CVE-2015-0240

Url: http://www.securityfocus.com/bid/72711

Url: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-0240

Url: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html

Url: https://support.lenovo.com/product_security/samba_remote_vuln

Url: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html

Url: https://support.lenovo.com/us/en/product_security/samba_remote_vuln

Url: http://rhn.redhat.com/errata/RHSA-2015-0256.html

Url: https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/

Url: https://access.redhat.com/articles/1346913

Url: http://www.securitytracker.com/id/1031783

Url: http://www.ubuntu.com/usn/USN-2508-1

Url: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-0240

Url: http://rhn.redhat.com/errata/RHSA-2015-0255.html

Url: http://www.debian.org/security/2015/dsa-3171

Url: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0252.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html

Url: http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Url: http://security.gentoo.org/glsa/glsa-201502-15.xml

Url: http://advisories.mageia.org/MGASA-2015-0084.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2015:081

Url: https://security-tracker.debian.org/tracker/CVE-2015-0240

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2015:082

Url: https://bugzilla.redhat.com/show_bug.cgi?id=1191325

Url: http://marc.info/?l=bugtraq&m=142722696102151&w=2

Url: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

Url: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360345

Url: http://rhn.redhat.com/errata/RHSA-2015-0251.html

Url: http://marc.info/?l=bugtraq&m=143039217203031&w=2

Url: http://rhn.redhat.com/errata/RHSA-2015-0254.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0249.html

Url: http://rhn.redhat.com/errata/RHSA-2015-0257.html

Url: https://www.exploit-db.com/exploits/36741/

Url: https://security.netapp.com/advisory/ntap-20250509-0001/

Url: https://www.mend.io/vulnerability-database/CVE-2015-0240

Severity Score

9.8

Weakness Type (CWE)

Code

CWE-17

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-0240

Date: February 23, 2015

Language: C

Severity Score

Related Resources (41)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?