CVE ID:	CVE-2015-0240
Description:	The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute arbitrary code via crafted Netlogon packets that use the ServerPasswordSet RPC API, as demonstrated by packets reaching the _netr_ServerPasswordSet function in rpc_server/netlogon/srv_netlog_nt.c.
Test IDs:	1.3.6.1.4.1.25623.1.0.869042   1.3.6.1.4.1.25623.1.0.123181   1.3.6.1.4.1.25623.1.0.850777   1.3.6.1.4.1.25623.1.0.871319   1.3.6.1.4.1.25623.1.1.4.2015.0353.1   1.3.6.1.4.1.25623.1.0.871316   1.3.6.1.4.1.25623.1.0.851034   1.3.6.1.4.1.25623.1.0.123184   1.3.6.1.4.1.25623.1.0.850934   1.3.6.1.4.1.25623.1.0.882120   1.3.6.1.4.1.25623.1.0.882121   1.3.6.1.4.1.25623.1.0.871315   1.3.6.1.4.1.25623.1.0.871318   1.3.6.1.4.1.25623.1.0.703171   1.3.6.1.4.1.25623.1.0.842101   1.3.6.1.4.1.25623.1.1.4.2015.0371.1   1.3.6.1.4.1.25623.1.1.1.2.2015.156   1.3.6.1.4.1.25623.1.1.10.2015.0084   1.3.6.1.4.1.25623.1.1.13.2015.064.01   1.3.6.1.4.1.25623.1.0.123182   1.3.6.1.4.1.25623.1.0.123183   1.3.6.1.4.1.25623.1.0.105231   1.3.6.1.4.1.25623.1.0.882123   1.3.6.1.4.1.25623.1.0.882119
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0240 1031783 http://www.securitytracker.com/id/1031783 36741 https://www.exploit-db.com/exploits/36741/ 72711 http://www.securityfocus.com/bid/72711 DSA-3171 http://www.debian.org/security/2015/dsa-3171 GLSA-201502-15 http://security.gentoo.org/glsa/glsa-201502-15.xml HPSBGN03288 http://marc.info/?l=bugtraq&m=142722696102151&w=2 HPSBUX03320 http://marc.info/?l=bugtraq&m=143039217203031&w=2 MDVSA-2015:081 http://www.mandriva.com/security/advisories?name=MDVSA-2015:081 MDVSA-2015:082 http://www.mandriva.com/security/advisories?name=MDVSA-2015:082 RHSA-2015:0249 http://rhn.redhat.com/errata/RHSA-2015-0249.html RHSA-2015:0250 http://rhn.redhat.com/errata/RHSA-2015-0250.html RHSA-2015:0251 http://rhn.redhat.com/errata/RHSA-2015-0251.html RHSA-2015:0252 http://rhn.redhat.com/errata/RHSA-2015-0252.html RHSA-2015:0253 http://rhn.redhat.com/errata/RHSA-2015-0253.html RHSA-2015:0254 http://rhn.redhat.com/errata/RHSA-2015-0254.html RHSA-2015:0255 http://rhn.redhat.com/errata/RHSA-2015-0255.html RHSA-2015:0256 http://rhn.redhat.com/errata/RHSA-2015-0256.html RHSA-2015:0257 http://rhn.redhat.com/errata/RHSA-2015-0257.html SSA:2015-064-01 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.360345 SSRT101952 http://marc.info/?l=bugtraq&m=143039217203031&w=2 SSRT101979 http://marc.info/?l=bugtraq&m=142722696102151&w=2 SUSE-SU-2015:0353 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00028.html SUSE-SU-2015:0371 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00030.html SUSE-SU-2015:0386 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00035.html USN-2508-1 http://www.ubuntu.com/usn/USN-2508-1 http://advisories.mageia.org/MGASA-2015-0084.html http://advisories.mageia.org/MGASA-2015-0084.html http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html https://access.redhat.com/articles/1346913 https://access.redhat.com/articles/1346913 https://bugzilla.redhat.com/show_bug.cgi?id=1191325 https://bugzilla.redhat.com/show_bug.cgi?id=1191325 https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240/ https://support.lenovo.com/product_security/samba_remote_vuln https://support.lenovo.com/product_security/samba_remote_vuln https://support.lenovo.com/us/en/product_security/samba_remote_vuln https://support.lenovo.com/us/en/product_security/samba_remote_vuln https://www.samba.org/samba/security/CVE-2015-0240 https://www.samba.org/samba/security/CVE-2015-0240 openSUSE-SU-2015:0375 http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html openSUSE-SU-2016:1064 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html openSUSE-SU-2016:1106 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html openSUSE-SU-2016:1107 http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html