CVE-2012-0870: Buffer Overflow
A flaw was found in the way Samba handled Any Batched (AndX) request packets. A malicious request could cause smbd to enter an infinite recursion and overflow heap-based buffer during recursive calls. This can be triggered by an unauthenticated attacker, resulting in smbd child process crash or possibly code execution.
Other sources
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0870?
CVE-2012-0870 is considered a high severity vulnerability due to the potential for remote code execution from unauthenticated attackers.
How do I fix CVE-2012-0870?
To fix CVE-2012-0870, update Samba to a version that addresses this vulnerability, ideally using the latest patches provided by your distribution.
What systems are affected by CVE-2012-0870?
CVE-2012-0870 affects Samba version 3.0.0 and various BlackBerry PlayBook OS versions.
Can CVE-2012-0870 lead to a denial of service attack?
Yes, an attacker can exploit CVE-2012-0870 to cause a denial of service by crashing the smbd child processes.
Is authentication required to exploit CVE-2012-0870?
No, CVE-2012-0870 can be exploited by an unauthenticated attacker.