The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Sep 13, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2007 |
| Freebsd | — | Upgrade samba | Dec 10, 2025 | Sep 21, 2007 |
| Oracle_linux | — | Upgrade samba-clientUpgrade sambaUpgrade samba-commonUpgrade samba-swat | Oct 16, 2024 | Sep 14, 2007 |
| Samba | — | Upgrade to Samba version 3.0.26a | Nov 13, 2013 | Sep 13, 2007 |
| Suse | — | Upgrade libtalloc2Upgrade sambaUpgrade libwbclient0-x86Upgrade ctdbUpgrade ctdb-pcp-pmdaUpgrade samba-winbindUpgrade libtalloc-develUpgrade samba-client-x86Upgrade samba-docUpgrade samba-ad-dc-libsUpgrade libtalloc2-x86Upgrade wb-cifs-idmap-pluginUpgrade samba-winbind-32bitUpgrade samba-32bitUpgrade samba-libs-python3Upgrade libsmbclient0-32bitUpgrade libldb-develUpgrade libsmbclient-develUpgrade samba-x86Upgrade libsmbclient0Upgrade libldb2Upgrade ldapsmbUpgrade libnetapi0Upgrade samba-libsUpgrade libtevent0Upgrade samba-dcerpcUpgrade libsmbsharemodes0Upgrade samba-develUpgrade libtdb-develUpgrade cifs-utilsUpgrade libnetapi-develUpgrade libwbclient0Upgrade samba-client-libsUpgrade samba-gpupdateUpgrade pam_cifscredsUpgrade libtdb1Upgrade libsmbsharemodes-develUpgrade libtalloc2-32bitUpgrade libtdb1-32bitUpgrade samba-winbind-libsUpgrade samba-ad-dcUpgrade libsmbclient0-x86Upgrade samba-client-langUpgrade samba-client-32bitUpgrade libtdb1-x86Upgrade libwbclient-develUpgrade libtalloc1Upgrade libtevent0-32bitUpgrade samba-winbind-libs-langUpgrade cifs-mountUpgrade libtevent0-x86Upgrade samba-python3Upgrade python3-ldbUpgrade libwbclient0-32bitUpgrade samba-toolUpgrade samba-winbind-x86Upgrade libtevent-develUpgrade cifs-utils-develUpgrade libtalloc1-x86Upgrade ldb-toolsUpgrade samba-testUpgrade samba-clientUpgrade libtalloc1-32bitUpgrade samba-dsdb-modulesUpgrade samba-krb-printingUpgrade samba-ldb-ldapUpgrade libldb1 | Aug 9, 2024 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub