Re: New Samba remote root vuln (CVE-2012-1182) script idea

[Patrik Karlsson <patrik () cqure net>]

On Fri, Apr 20, 2012 at 2:04 PM, Aleksandar Nikolic
<nikolic.alek () gmail com>wrote:

> Hi,
>
>
> could you check the logs and see if the script actually crashed the
> machine?
> Log should be called log.nmap , and should mention invalid free and crash
> as opposed to simple error.
>
> I'll set up a test and check myself.
>
> Regards,
> Aleksandar
No, doesn't look that way. This is what I'm seeing:
[2012/04/20 14:12:40.720710,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(13): value out of range
[2012/04/20 14:12:40.720788,  0] rpc_server/srv_pipe.c:2439(api_rpcTNP)
  api_rpcTNP: \samr: SAMR_GETALIASMEMBERSHIP failed.

//Patrik

-- 
Patrik Karlsson
http://www.cqure.net
http://twitter.com/nevdull77
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/