Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade ja-sambaUpgrade samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Suse | — | Upgrade wb-cifs-idmap-pluginUpgrade libtevent0-32bitUpgrade samba-python3Upgrade libwbclient0-x86Upgrade libtdb1-x86Upgrade libsmbclient-develUpgrade samba-ldb-ldapUpgrade libtevent0-x86Upgrade samba-dsdb-modulesUpgrade libtevent-develUpgrade libnetapi0Upgrade ldb-toolsUpgrade samba-winbind-x86Upgrade libwbclient0-32bitUpgrade cifs-utilsUpgrade libtevent0Upgrade samba-libsUpgrade samba-winbind-libs-langUpgrade cifs-utils-develUpgrade libtalloc1-32bitUpgrade libtalloc1-x86Upgrade libtalloc2-x86Upgrade libsmbsharemodes-develUpgrade samba-testUpgrade samba-libs-python3Upgrade libtalloc2Upgrade samba-32bitUpgrade libsmbclient0-x86Upgrade samba-winbind-libsUpgrade libwbclient0Upgrade samba-client-libsUpgrade libldb1Upgrade libtalloc-develUpgrade libldb-develUpgrade libsmbsharemodes0Upgrade ctdbUpgrade samba-ad-dc-libsUpgrade cifs-mountUpgrade libldb2Upgrade samba-dcerpcUpgrade libnetapi-develUpgrade samba-winbind-32bitUpgrade samba-ad-dcUpgrade sambaUpgrade samba-docUpgrade samba-client-langUpgrade samba-winbindUpgrade samba-krb-printingUpgrade libtdb1-32bitUpgrade ctdb-pcp-pmdaUpgrade libtalloc1Upgrade samba-client-x86Upgrade samba-develUpgrade python3-ldbUpgrade libtdb1Upgrade samba-client-32bitUpgrade samba-toolUpgrade ldapsmbUpgrade libwbclient-develUpgrade samba-gpupdateUpgrade samba-clientUpgrade libsmbclient0-32bitUpgrade libtalloc2-32bitUpgrade samba-x86Upgrade pam_cifscredsUpgrade libsmbclient0Upgrade libtdb-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub