CVEs-PoC/2012/CVE-2012-1182.md

CVE-2012-1182

Description

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

POC

Reference

• https://www.samba.org/samba/security/CVE-2012-1182

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Acosta27/blue_writeup
• https://github.com/Esther7171/Ice
• https://github.com/Eutectico/Steel-Mountain
• https://github.com/Juba0x4355/Blue-THM
• https://github.com/Juba0x4355/Blue-Writeup
• https://github.com/Kiosec/Windows-Exploitation
• https://github.com/Qftm/Information_Collection_Handbook
• https://github.com/amishamunjal-az/Week16-Homework
• https://github.com/casohub/multinmap
• https://github.com/esteban0477/RedTeamPlaybook
• https://github.com/jlashay/Penetration-Testing-1
• https://github.com/joneswu456/rt-n56u
• https://github.com/kaanyeniyol/python-nmap
• https://github.com/katgoods/week16
• https://github.com/notsag-dev/htb-blue
• https://github.com/notsag-dev/htb-legacy
• https://github.com/odolezal/D-Link-DIR-655
• https://github.com/pikaqiu-lyh/collect-message
• https://github.com/program-smith/THM-Blue
• https://github.com/substing/blue_ctf
• https://github.com/superhero1/OSCP-Prep
• https://github.com/tomdixonn/Homework_16
• https://github.com/xuoneyuan/Imformation-Collection
• https://github.com/xuoneyuan/imformation-college
• https://github.com/xuoneyuan/src