CVE-2012-2111
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC...
CVE-2012-2111 is a medium vulnerability (CVSS 6.5) in Samba, published April 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.75%, the 91st percentile. Fixed in samba 2:3.6.5-1.
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
Exploit likelihood
What each source reports
NVD Score used
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
CVE-2012-2111- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
CVE-2012-2111- Updated
- 2026-11-02
EUVDEUVD-2012-2114 No score
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
EUVD-2012-2114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7948-mr73-p8vq No score
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC...
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
GHSA-7948-mr73-p8vq- Updated
- 2026-11-02
OSV No score
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
CVE-2012-2111- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-2111 No score
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
- Record
DEBIAN-CVE-2012-2111- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.6.5-1 | 2:3.6.5-1 |
sambaDebian:13 |
before 2:3.6.5-1 | 2:3.6.5-1 |
sambaDebian:14 |
before 2:3.6.5-1 | 2:3.6.5-1 |
sambaDebian:6.0 |
before 2:3.5.6~dfsg-3squeeze8, plus listed versions 2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze32:3.5.6~dfsg-3squeeze42:3.5.6~dfsg-3squeeze52:3.5.6~dfsg-3squeeze62:3.5.6~dfsg-3squeeze7 |
2:3.5.6~dfsg-3squeeze8 |
samba3xRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-clientRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-commonRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-docRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
Show 67 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-swatRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-winbindRed Hat:enterprise_linux:5::client |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3xRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3xRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-clientRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-commonRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-docRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-swatRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-winbindRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server |
before 0:3.5.10-0.109.el5_8 | 0:3.5.10-0.109.el5_8 |
libsmbclientRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
sambaRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-clientRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-commonRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-debuginfoRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbindRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclient-develRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-docRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-swatRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-develRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
sambaRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-clientRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-commonRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbindRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclientRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclient-develRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-docRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-swatRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-develRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclientRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
sambaRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-clientRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-commonRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-debuginfoRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbindRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclient-develRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-docRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-swatRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-develRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclientRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
sambaRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-clientRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-commonRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbindRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
libsmbclient-develRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-docRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-domainjoin-guiRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-swatRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-develRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
samba-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:3.5.10-116.el6_2 | 0:3.5.10-116.el6_2 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
ubuntu.com/usn/USN-1434-1
osvdb.org/81648
lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html
mandriva.com/security/advisories?name=MDVSA-2012:067
secunia.com/advisories/48996
lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html
Show 80 moreShow less
securitytracker.com/id?1026988
marc.info?l=bugtraq&m=134323086902585&w=2
samba.org/samba/security/CVE-2012-2111
collax.com/produkte/AllinOne-server-for-small-businesses
debian.org/security/2012/dsa-2463
rhn.redhat.com/errata/RHSA-2012-0533.html
nvd.nist.gov/vuln/detail/CVE-2012-2111
github.com/advisories/GHSA-7948-mr73-p8vq
security-tracker.debian.org/tracker/CVE-2012-2111
access.redhat.com/errata/RHSA-2012:0533
bugzilla.redhat.com/show_bug.cgi?id=813569
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0533.json
cve.org/CVERecord?id=CVE-2012-2111
suse.com/security/cve/CVE-2009-1886