The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Sep 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2007 |
| Freebsd | — | Upgrade samba | Dec 10, 2025 | Sep 21, 2007 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | Sep 14, 2007 |
| Samba | — | Upgrade to Samba version 3.0.26a | Nov 13, 2013 | Sep 13, 2007 |
| Suse | — | Upgrade samba-client-libsUpgrade libtdb1-32bitUpgrade libtevent0-32bitUpgrade samba-krb-printingUpgrade cifs-mountUpgrade libsmbsharemodes-develUpgrade samba-winbind-libsUpgrade samba-python3Upgrade samba-client-32bitUpgrade libtdb1-x86Upgrade libtdb1Upgrade samba-toolUpgrade libwbclient-develUpgrade libtevent0-x86Upgrade pam_cifscredsUpgrade samba-testUpgrade python3-ldbUpgrade samba-gpupdateUpgrade libsmbclient0-x86Upgrade libtalloc2-32bitUpgrade samba-winbind-x86Upgrade libtevent-develUpgrade libtalloc1-32bitUpgrade samba-ldb-ldapUpgrade ldb-toolsUpgrade samba-clientUpgrade samba-winbind-libs-langUpgrade samba-client-langUpgrade samba-dsdb-modulesUpgrade cifs-utils-develUpgrade samba-ad-dcUpgrade libtalloc1-x86Upgrade libwbclient0-32bitUpgrade libldb1Upgrade libtalloc1Upgrade samba-32bitUpgrade libnetapi-develUpgrade libtalloc-develUpgrade cifs-utilsUpgrade samba-libsUpgrade libtdb-develUpgrade samba-x86Upgrade libtalloc2Upgrade libsmbsharemodes0Upgrade libsmbclient-develUpgrade libtalloc2-x86Upgrade samba-dcerpcUpgrade samba-docUpgrade samba-winbindUpgrade samba-develUpgrade libldb-develUpgrade ctdbUpgrade ldapsmbUpgrade libsmbclient0-32bitUpgrade libwbclient0Upgrade libsmbclient0Upgrade samba-client-x86Upgrade samba-ad-dc-libsUpgrade samba-winbind-32bitUpgrade wb-cifs-idmap-pluginUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3Upgrade sambaUpgrade libwbclient0-x86Upgrade libtevent0Upgrade libnetapi0Upgrade libldb2 | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub