CVE-2012-0870

2012-02-2312:33:55

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.958

Percentile

99.5%

JSON

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

Affected configurations

Nvd

Node

sambasambaMatch3.0.0

rimblackberry_playbook_tabletMatch-

rimblackberry_playbook_osRange≤2.0

rimblackberry_playbook_osMatch1.0

rimblackberry_playbook_osMatch1.0.3

rimblackberry_playbook_osMatch1.0.5

rimblackberry_playbook_osMatch1.0.6

rimblackberry_playbook_osMatch1.0.7

rimblackberry_playbook_osMatch1.0.7.2942

rimblackberry_playbook_osMatch1.0.7.3312

rimblackberry_playbook_osMatch1.0.8.4985

rimblackberry_playbook_osMatch1.0.8.6067

VendorProductVersionCPE
sambasamba3.0.0cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
rimblackberry_playbook_tablet-cpe:2.3:h:rim:blackberry_playbook_tablet:-:*:*:*:*:*:*:*
rimblackberry_playbook_os*cpe:2.3:o:rim:blackberry_playbook_os:*:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0cpe:2.3:o:rim:blackberry_playbook_os:1.0:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.3cpe:2.3:o:rim:blackberry_playbook_os:1.0.3:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.5cpe:2.3:o:rim:blackberry_playbook_os:1.0.5:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.6cpe:2.3:o:rim:blackberry_playbook_os:1.0.6:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.7cpe:2.3:o:rim:blackberry_playbook_os:1.0.7:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.7.2942cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.2942:*:*:*:*:*:*:*
rimblackberry_playbook_os1.0.7.3312cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.3312:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samba	samba	3.0.0	cpe:2.3:a:samba:samba:3.0.0:::::::*
rim	blackberry_playbook_tablet	-	cpe:2.3:h:rim:blackberry_playbook_tablet:-:::::::*
rim	blackberry_playbook_os	*	cpe:2.3:o:rim:blackberry_playbook_os::::::::
rim	blackberry_playbook_os	1.0	cpe:2.3:o:rim:blackberry_playbook_os:1.0:::::::*
rim	blackberry_playbook_os	1.0.3	cpe:2.3:o:rim:blackberry_playbook_os:1.0.3:::::::*
rim	blackberry_playbook_os	1.0.5	cpe:2.3:o:rim:blackberry_playbook_os:1.0.5:::::::*
rim	blackberry_playbook_os	1.0.6	cpe:2.3:o:rim:blackberry_playbook_os:1.0.6:::::::*
rim	blackberry_playbook_os	1.0.7	cpe:2.3:o:rim:blackberry_playbook_os:1.0.7:::::::*
rim	blackberry_playbook_os	1.0.7.2942	cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.2942:::::::*
rim	blackberry_playbook_os	1.0.7.3312	cpe:2.3:o:rim:blackberry_playbook_os:1.0.7.3312:::::::*