The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Centos_linux | — | Upgrade samba-winbindUpgrade samba-client-libsUpgrade samba4-commonUpgrade samba4-testUpgrade samba-domainjoin-guiUpgrade samba-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-clientUpgrade samba4-winbind-clientsUpgrade sambaUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-develUpgrade samba4-libsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-docUpgrade samba4-clientUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba4-swatUpgrade ctdb-develUpgrade samba4Upgrade ctdbUpgrade samba-winbind-develUpgrade samba4-dc-libsUpgrade samba-vfs-glusterfsUpgrade samba-test-develUpgrade samba-swatUpgrade samba4-pidlUpgrade samba-testUpgrade samba-dcUpgrade samba4-winbindUpgrade samba4-dcUpgrade libwbclient-develUpgrade samba-glusterfsUpgrade samba4-develUpgrade samba-pidlUpgrade samba4-python | Jul 6, 2016 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Hpux | — | Update CIFS-Server to the latest version | Aug 11, 2017 | Mar 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-commonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-common-toolsUpgrade libsmbclient | Nov 30, 2017 | Mar 13, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 13, 2016 |
| Oracle_linux | — | Upgrade samba-dcUpgrade samba-test-develUpgrade samba4-dcUpgrade samba4-pythonUpgrade samba4Upgrade samba-domainjoin-guiUpgrade samba-pidlUpgrade samba-client-libsUpgrade samba4-winbind-clientsUpgrade samba4-develUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba-testUpgrade samba-glusterfsUpgrade samba4-swatUpgrade samba4-clientUpgrade samba4-winbindUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-develUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-vfs-glusterfsUpgrade samba-winbind-krb5-locatorUpgrade samba-docUpgrade samba4-commonUpgrade samba-common-libsUpgrade samba-swatUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba4-dc-libsUpgrade samba-clientUpgrade sambaUpgrade samba4-testUpgrade samba-test-libsUpgrade samba4-winbind-krb5-locator | Mar 22, 2016 | Mar 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 8, 2016 |
| Samba | — | Upgrade to Samba version 4.3.6Upgrade to Samba version 4.2.9Upgrade to Samba version 4.4.0rc4Upgrade to Samba version 4.1.23 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade libpdb0Upgrade samba-clientUpgrade libnetapi0-32bitUpgrade libndr-krb5pac-develUpgrade libnetapi-develUpgrade samba-32bitUpgrade libndr0Upgrade libsamba-passdb0Upgrade libdcerpc-samr-develUpgrade libdcerpc-develUpgrade libsamdb0Upgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade libldb1-32bitUpgrade libsamba-util0Upgrade libsamba-errors0Upgrade libndr-krb5pac0Upgrade libsamba-errors-develUpgrade libsmbldap0Upgrade libgensec0Upgrade samba-winbindUpgrade libdcerpc0-32bitUpgrade libldb-develUpgrade libsmbclient0Upgrade libtalloc2-32bitUpgrade libdcerpc-binding0Upgrade libndr1-32bitUpgrade libsmbldap2-32bitUpgrade libsmbclient-raw0Upgrade libndr-nbt-develUpgrade samba-winbind-32bitUpgrade libndr-nbt0Upgrade libdcerpc-atsvc-develUpgrade libwbclient0-32bitUpgrade samba-core-develUpgrade samba-x86Upgrade libdcerpc0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbldap2Upgrade libsamba-policy-develUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-develUpgrade libdcerpc-atsvc0Upgrade libndr1Upgrade libtevent-util0-32bitUpgrade samba-krb-printingUpgrade samba-docUpgrade libtdb1Upgrade libsamba-passdb0-32bitUpgrade libsamba-credentials-develUpgrade sambaUpgrade samba-pythonUpgrade libwbclient-develUpgrade libsmbclient0-32bitUpgrade libwbclient0-x86Upgrade libsmbsharemodes-develUpgrade samba-libs-python3Upgrade libdcerpc-binding0-32bitUpgrade libndr0-32bitUpgrade libtdb1-32bitUpgrade samba-python3Upgrade libsmbconf-develUpgrade samba-test-develUpgrade libtdb-develUpgrade libsamba-util-develUpgrade libldb1Upgrade libpdb-develUpgrade libtalloc-develUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libgensec0-32bitUpgrade libtevent0-32bitUpgrade libtevent-util0Upgrade libsmbldap-develUpgrade libsamba-policy-python3-develUpgrade libtevent0Upgrade libsamba-errors0-32bitUpgrade samba-libsUpgrade libsmbconf0Upgrade libndr-krb5pac0-32bitUpgrade libtalloc2Upgrade samba-testUpgrade libndr-standard0-32bitUpgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade libsamba-policy0-python3Upgrade samba-winbind-x86Upgrade libregistry0Upgrade libsamba-passdb-develUpgrade samba-cephUpgrade libdcerpc-samr0Upgrade samba-kdcUpgrade libwbclient0Upgrade libsmbconf0-32bitUpgrade samba-develUpgrade libgensec-develUpgrade samba-client-32bitUpgrade libsmbclient0-x86Upgrade libsamba-policy0Upgrade libtdb1-x86Upgrade libsmbldap0-32bitUpgrade libsamdb-develUpgrade libnetapi0Upgrade libtevent-develUpgrade ctdbUpgrade libsmbclient-raw-develUpgrade libsamba-credentials0-32bitUpgrade samba-client-x86Upgrade libsmbsharemodes0Upgrade libregistry-develUpgrade ldapsmbUpgrade libndr-standard-develUpgrade samba-dsdb-modulesUpgrade libndr-standard0Upgrade libpdb0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade libsamba-util0-32bit | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade swat | Mar 13, 2016 | Mar 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub