Oval Definition:	oval:org.mitre.oval:def:19640
Revision Date: 2015-04-20 Version: 29 Title: HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges Description: The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-2111 Platform(s): HP-UX 11 Product(s): Definition Synopsis Criteria meets HP Security Bulletin HPSBUX02789 platforms HP-UX B.11.23 OR HP-UX B.11.31 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.03.01.05 OR CIFS-Server.CIFS-ADMIN version is less than A.03.01.05 OR CIFS-Server.CIFS-DOC version is less than A.03.01.05 OR CIFS-Server.CIFS-LIB version is less than A.03.01.05 OR CIFS-Server.CIFS-RUN version is less than A.03.01.05 OR CIFS-Server.CIFS-UTIL version is less than A.03.01.05 OR Criteria meets HP Security Bulletin HPSBUX02789 platforms HP-UX B.11.11 OR HP-UX B.11.23 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.02.04.06 OR CIFS-Server.CIFS-ADMIN version is less than A.02.04.06 OR CIFS-Server.CIFS-DOC version is less than A.02.04.06 OR CIFS-Server.CIFS-LIB version is less than A.02.04.06 OR CIFS-Server.CIFS-MAN version is less than A.02.04.06 OR CIFS-Server.CIFS-RUN version is less than A.02.04.06 OR CIFS-Server.CIFS-UTIL version is less than A.02.04.06 OR Criteria meets HP Security Bulletin HPSBUX02789 HP-UX B.11.31 AND filesets tests CIFS-CFSM.CFSM-KRN version is less than A.02.04.06 OR CIFS-CFSM.CFSM-MAN version is less than A.02.04.06 OR CIFS-CFSM.CFSM-RUN version is less than A.02.04.06 OR CIFS-Development.CIFS-PRG version is less than A.02.04.06 OR CIFS-Server.CIFS-ADMIN version is less than A.02.04.06 OR CIFS-Server.CIFS-DOC version is less than A.02.04.06 OR CIFS-Server.CIFS-LIB version is less than A.02.04.06 OR CIFS-Server.CIFS-MAN version is less than A.02.04.06 OR CIFS-Server.CIFS-RUN version is less than A.02.04.06 OR CIFS-Server.CIFS-UTIL version is less than A.02.04.06 OR Criteria meets HP Security Bulletin HPSBUX02789 HP-UX B.11.11 AND filesets tests CIFS-Development.CIFS-PRG version is less than A.02.03.06 OR CIFS-Server.CIFS-ADMIN version is less than A.02.03.06 OR CIFS-Server.CIFS-DOC version is less than A.02.03.06 OR CIFS-Server.CIFS-LIB version is less than A.02.03.06 OR CIFS-Server.CIFS-MAN version is less than A.02.03.06 OR CIFS-Server.CIFS-RUN version is less than A.02.03.06 OR CIFS-Server.CIFS-UTIL version is less than A.02.03.06
BACK