Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: New Samba remote root vuln (CVE-2012-1182) script idea
From: Patrik Karlsson <patrik () cqure net>
Date: Fri, 20 Apr 2012 14:13:12 +0200

On Fri, Apr 20, 2012 at 2:04 PM, Aleksandar Nikolic
<nikolic.alek () gmail com>wrote:

Hi,


could you check the logs and see if the script actually crashed the
machine?
Log should be called log.nmap , and should mention invalid free and crash
as opposed to simple error.

I'll set up a test and check myself.

Regards,
Aleksandar



No, doesn't look that way. This is what I'm seeing:
[2012/04/20 14:12:40.720710,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(13): value out of range
[2012/04/20 14:12:40.720788,  0] rpc_server/srv_pipe.c:2439(api_rpcTNP)
  api_rpcTNP: \samr: SAMR_GETALIASMEMBERSHIP failed.

//Patrik

-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]