The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Sep 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2007 |
| Freebsd | — | Upgrade samba | Dec 10, 2025 | Sep 21, 2007 |
| Oracle_linux | — | Upgrade samba-swatUpgrade samba-commonUpgrade sambaUpgrade samba-client | Oct 16, 2024 | Sep 14, 2007 |
| Samba | — | Upgrade to Samba version 3.0.26a | Nov 13, 2013 | Sep 13, 2007 |
| Suse | — | Upgrade ctdb-pcp-pmdaUpgrade libwbclient0-x86Upgrade libtalloc2Upgrade libsmbclient-develUpgrade samba-x86Upgrade samba-winbind-32bitUpgrade samba-32bitUpgrade samba-dcerpcUpgrade wb-cifs-idmap-pluginUpgrade samba-libs-python3Upgrade libtalloc-develUpgrade sambaUpgrade libtdb-develUpgrade samba-client-x86Upgrade libsmbclient0-32bitUpgrade libldb-develUpgrade libwbclient0Upgrade libldb2Upgrade ctdbUpgrade cifs-utilsUpgrade samba-libsUpgrade samba-docUpgrade libtevent0Upgrade libnetapi0Upgrade samba-develUpgrade samba-winbindUpgrade libnetapi-develUpgrade libsmbsharemodes0Upgrade libtalloc2-x86Upgrade libsmbclient0Upgrade samba-ad-dc-libsUpgrade ldapsmbUpgrade libtevent-develUpgrade pam_cifscredsUpgrade samba-dsdb-modulesUpgrade samba-ad-dcUpgrade samba-testUpgrade libtalloc1Upgrade samba-toolUpgrade samba-ldb-ldapUpgrade cifs-utils-develUpgrade samba-client-32bitUpgrade libldb1Upgrade libtalloc1-32bitUpgrade python3-ldbUpgrade libtalloc1-x86Upgrade samba-gpupdateUpgrade samba-python3Upgrade libwbclient-develUpgrade samba-winbind-libs-langUpgrade libtdb1Upgrade samba-winbind-libsUpgrade libsmbclient0-x86Upgrade libsmbsharemodes-develUpgrade libtdb1-32bitUpgrade samba-winbind-x86Upgrade libtevent0-32bitUpgrade ldb-toolsUpgrade libwbclient0-32bitUpgrade samba-krb-printingUpgrade samba-client-libsUpgrade libtdb1-x86Upgrade samba-clientUpgrade libtevent0-x86Upgrade libtalloc2-32bitUpgrade cifs-mountUpgrade samba-client-lang | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub