The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 30, 2012 |
| Centos_linux | — | Upgrade samba3x-domainjoin-guiUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba3x-docUpgrade samba3xUpgrade samba3x-winbind-develUpgrade samba3x-commonUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba-swatUpgrade samba3x-winbindUpgrade samba3x-swatUpgrade samba-winbind | Dec 1, 2016 | Apr 30, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 30, 2012 |
| Freebsd | — | Upgrade samba35Upgrade samba34Upgrade samba36 | Dec 10, 2025 | Apr 30, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 30, 2012 |
| Hpux | — | Update CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest version | Aug 11, 2017 | Apr 30, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.15-0.175.0.8.0.3.0 on Solaris 11.0 | May 29, 2017 | Apr 30, 2012 |
| Oracle_linux | — | Upgrade samba3x-commonUpgrade samba3x-domainjoin-guiUpgrade samba-winbind-develUpgrade samba3xUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba3x-docUpgrade samba-commonUpgrade samba-docUpgrade sambaUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-domainjoin-guiUpgrade samba-winbindUpgrade samba3x-swatUpgrade samba-winbind-krb5-locatorUpgrade samba3x-winbind-develUpgrade samba-winbind-clientsUpgrade samba-swatUpgrade samba3x-winbind | Oct 16, 2024 | Apr 30, 2012 |
| Samba | — | Upgrade to Samba version 3.6.5Upgrade to Samba version 3.5.15Upgrade to Samba version 3.4.17 | Nov 13, 2013 | Apr 30, 2012 |
| Suse | — | Upgrade libtevent0Upgrade libsamba-passdb0Upgrade libsmbldap-develUpgrade libndr-standard-develUpgrade libndr0Upgrade samba-libs-python3-32bitUpgrade samba-winbind-libs-langUpgrade libsmbclient-raw0Upgrade samba-client-libsUpgrade libsamdb0-32bitUpgrade libtalloc2Upgrade libdcerpc-atsvc-develUpgrade libsamba-hostconfig-develUpgrade libgensec0Upgrade python3-ldbUpgrade libtevent-util0-32bitUpgrade libtevent-develUpgrade ldb-toolsUpgrade samba-kdcUpgrade samba-dsdb-modulesUpgrade libsamba-passdb-develUpgrade libtevent0-x86Upgrade libtdb1-x86Upgrade samba-client-32bitUpgrade libgensec0-32bitUpgrade samba-client-x86Upgrade samba-winbind-x86Upgrade samba-test-develUpgrade samba-testUpgrade libsamba-errors-develUpgrade libdcerpc-samr0Upgrade libsmbsharemodes-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0-32bitUpgrade libtalloc-develUpgrade libsamdb-develUpgrade libtalloc2-x86Upgrade samba-libsUpgrade samba-32bitUpgrade libsmbconf0-32bitUpgrade libtevent-util-develUpgrade libsamba-util0-32bitUpgrade libndr-standard0-32bitUpgrade libdcerpc0Upgrade libsmbclient0-x86Upgrade libldb1Upgrade libsmbconf0Upgrade libndr-develUpgrade ctdbUpgrade libtevent0-32bitUpgrade libsamba-policy0Upgrade libgensec-develUpgrade libsamba-credentials0Upgrade libsamba-hostconfig0Upgrade libndr-krb5pac0Upgrade libwbclient0-x86Upgrade libldb1-32bitUpgrade samba-ad-dc-libsUpgrade libsamba-util0Upgrade libsamdb0Upgrade libsmbldap0Upgrade libndr-nbt0Upgrade libdcerpc0-32bitUpgrade samba-winbind-libsUpgrade libdcerpc-binding0Upgrade libsmbldap0-32bitUpgrade libsmbclient-develUpgrade libsamba-credentials-develUpgrade ctdb-pcp-pmdaUpgrade libpdb-develUpgrade libldb2Upgrade libwbclient0-32bitUpgrade sambaUpgrade samba-develUpgrade libsmbsharemodes0Upgrade libtdb-develUpgrade libpdb0-32bitUpgrade libnetapi-develUpgrade libndr-nbt-develUpgrade libregistry-develUpgrade libregistry0Upgrade libdcerpc-samr-develUpgrade libtdb1-32bitUpgrade samba-libs-python3Upgrade libwbclient0Upgrade libtevent-util0Upgrade libdcerpc-atsvc0Upgrade samba-winbind-32bitUpgrade samba-docUpgrade libsamba-util-develUpgrade libsmbldap2-32bitUpgrade libwbclient-develUpgrade samba-clientUpgrade libndr-standard0Upgrade libsmbconf-develUpgrade samba-core-develUpgrade libndr-krb5pac0-32bitUpgrade libndr-krb5pac-develUpgrade libsamba-policy-develUpgrade ldapsmbUpgrade libsmbclient0Upgrade libtdb1Upgrade libsamba-errors0Upgrade libnetapi0-32bitUpgrade samba-client-langUpgrade samba-krb-printingUpgrade libsmbclient-raw0-32bitUpgrade samba-gpupdateUpgrade libsmbldap2Upgrade libtalloc2-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-passdb0-32bitUpgrade samba-dcerpcUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-ad-dcUpgrade libpdb0Upgrade libsmbclient-raw-develUpgrade libdcerpc-develUpgrade libldb-develUpgrade samba-ldb-ldapUpgrade libsamba-errors0-32bitUpgrade libnetapi0Upgrade samba-python3Upgrade libsamba-credentials0-32bitUpgrade libndr0-32bitUpgrade samba-x86Upgrade samba-toolUpgrade samba-pythonUpgrade samba-winbind | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 30, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub