CVE ID:	CVE-2012-1182
Description:	The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
Test IDs:	1.3.6.1.4.1.25623.1.0.881179   1.3.6.1.4.1.25623.1.0.123943   1.3.6.1.4.1.25623.1.0.150729   1.3.6.1.4.1.25623.1.0.864213   1.3.6.1.4.1.25623.1.0.870584   1.3.6.1.4.1.25623.1.0.864238   1.3.6.1.4.1.25623.1.0.72037   1.3.6.1.4.1.25623.1.0.72230   1.3.6.1.4.1.25623.1.1.4.2012.0500.1   1.3.6.1.4.1.25623.1.0.123690   1.3.6.1.4.1.25623.1.0.881228   1.3.6.1.4.1.25623.1.0.881680   1.3.6.1.4.1.25623.1.1.4.2012.0501.1   1.3.6.1.4.1.25623.1.1.4.2012.0502.1   1.3.6.1.4.1.25623.1.0.71214   1.3.6.1.4.1.25623.1.0.831574   1.3.6.1.4.1.25623.1.0.881650   1.3.6.1.4.1.25623.1.0.850203   1.3.6.1.4.1.25623.1.0.870935   1.3.6.1.4.1.25623.1.0.840980   1.3.6.1.4.1.25623.1.0.71210   1.3.6.1.4.1.25623.1.0.870928   1.3.6.1.4.1.25623.1.0.71254   1.3.6.1.4.1.25623.1.0.71209   1.3.6.1.4.1.25623.1.0.71701   1.3.6.1.4.1.25623.1.0.123695   1.3.6.1.4.1.25623.1.0.72232   1.3.6.1.4.1.25623.1.0.881194   1.3.6.1.4.1.25623.1.0.123940   1.3.6.1.4.1.25623.1.0.870581   1.3.6.1.4.1.25623.1.0.850289   1.3.6.1.4.1.25623.1.0.881654   1.3.6.1.4.1.25623.1.0.71279
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1182 http://lists.apple.com/archives/security-announce/2012/May/msg00001.html Debian Security Information: DSA-2450 (Google Search) http://www.debian.org/security/2012/dsa-2450 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html HPdes Security Advisory: HPSBMU02790 http://marc.info/?l=bugtraq&m=133951282306605&w=2 HPdes Security Advisory: HPSBUX02789 http://marc.info/?l=bugtraq&m=134323086902585&w=2 HPdes Security Advisory: SSRT100824 http://marc.info/?l=bugtraq&m=134323086902585&w=2 HPdes Security Advisory: SSRT100872 http://marc.info/?l=bugtraq&m=133951282306605&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2012:055 http://www.securitytracker.com/id?1026913 http://secunia.com/advisories/48751 http://secunia.com/advisories/48754 http://secunia.com/advisories/48816 http://secunia.com/advisories/48818 http://secunia.com/advisories/48844 http://secunia.com/advisories/48873 http://secunia.com/advisories/48879 http://secunia.com/advisories/48999 SuSE Security Announcement: SUSE-SU-2012:0501 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html SuSE Security Announcement: SUSE-SU-2012:0502 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html SuSE Security Announcement: SUSE-SU-2012:0504 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html SuSE Security Announcement: SUSE-SU-2012:0515 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html http://www.ubuntu.com/usn/USN-1423-1