[Bug 978458] Re: CVE-2012-1182: "root" credential remote code execution

Launchpad Bug Tracker 978458 at bugs.launchpad.net
Fri Apr 13 05:30:14 UTC 2012


This bug was fixed in the package samba - 2:3.6.3-2ubuntu2

---------------
samba (2:3.6.3-2ubuntu2) precise-proposed; urgency=low

  * SECURITY UPDATE: Unauthenticated remote code execution via
    RPC calls (LP: #978458)
    - debian/patches/CVE-2012-1182-1.patch: Fix PIDL compiler to generate code
      that uses the same value for array allocation and array length checks.
      Based on upstream patch.
    - debian/patches/CVE-2012-1182-2.patch: Regenerate PIDL generated files
      with the patched PIDL compiler
    - CVE-2012-1182
 -- Tyler Hicks <tyhicks at canonical.com>   Thu, 12 Apr 2012 05:28:44 -0500

** Changed in: samba (Ubuntu Precise)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/978458

Title:
  CVE-2012-1182: "root" credential remote code execution

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/978458/+subscriptions



More information about the Ubuntu-server-bugs mailing list