CVE ID:	CVE-2012-2111
Description:	The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
Test IDs:	1.3.6.1.4.1.25623.1.0.71266   1.3.6.1.4.1.25623.1.0.71222   1.3.6.1.4.1.25623.1.0.71340   1.3.6.1.4.1.25623.1.0.71667   1.3.6.1.4.1.25623.1.0.72046   1.3.6.1.4.1.25623.1.0.72255   1.3.6.1.4.1.25623.1.0.123927   1.3.6.1.4.1.25623.1.0.864398   1.3.6.1.4.1.25623.1.0.864370   1.3.6.1.4.1.25623.1.0.864406   1.3.6.1.4.1.25623.1.0.870590   1.3.6.1.4.1.25623.1.0.864422   1.3.6.1.4.1.25623.1.0.881081   1.3.6.1.4.1.25623.1.0.881060   1.3.6.1.4.1.25623.1.0.850252   1.3.6.1.4.1.25623.1.0.840998   1.3.6.1.4.1.25623.1.0.831570   1.3.6.1.4.1.25623.1.1.4.2012.0573.1   1.3.6.1.4.1.25623.1.1.4.2012.0591.1   1.3.6.1.4.1.25623.1.0.150738
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2111 Debian Security Information: DSA-2463 (Google Search) http://www.debian.org/security/2012/dsa-2463 http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079662.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079670.html http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079677.html HPdes Security Advisory: HPSBUX02789 http://marc.info/?l=bugtraq&m=134323086902585&w=2 HPdes Security Advisory: SSRT100824 http://marc.info/?l=bugtraq&m=134323086902585&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2012:067 http://osvdb.org/81648 RedHat Security Advisories: RHSA-2012:0533 http://rhn.redhat.com/errata/RHSA-2012-0533.html http://www.securitytracker.com/id?1026988 http://secunia.com/advisories/48976 http://secunia.com/advisories/48984 http://secunia.com/advisories/48996 http://secunia.com/advisories/48999 http://secunia.com/advisories/49017 http://secunia.com/advisories/49030 SuSE Security Announcement: SUSE-SU-2012:0573 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00023.html SuSE Security Announcement: SUSE-SU-2012:0591 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00003.html SuSE Security Announcement: openSUSE-SU-2012:0583 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00001.html http://www.ubuntu.com/usn/USN-1434-1