The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade samba-swat | Dec 1, 2016 | Jun 24, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-clientUpgrade samba-common | Oct 16, 2024 | Jun 24, 2009 |
| Samba | — | Upgrade to Samba version 3.2.13Upgrade to Samba version 3.0.35Upgrade to Samba version 3.3.6 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade libpdb0Upgrade libldb2Upgrade libwbclient-develUpgrade samba-ad-dc-libsUpgrade libtevent-util-develUpgrade ctdb-pcp-pmdaUpgrade libnetapi-develUpgrade libsmbsharemodes0Upgrade libtdb1-32bitUpgrade libsamba-util-develUpgrade libtalloc2Upgrade libtalloc2-x86Upgrade libsmbconf0-32bitUpgrade wb-cifs-idmap-pluginUpgrade libwbclient0-x86Upgrade libdcerpc-binding0Upgrade libndr-nbt0Upgrade cifs-utilsUpgrade samba-kdcUpgrade libsamba-credentials0-32bitUpgrade libsamba-hostconfig0Upgrade libdcerpc-develUpgrade libsmbclient0-32bitUpgrade libsmbldap-develUpgrade libdcerpc0-32bitUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libpdb-develUpgrade libndr-krb5pac0-32bitUpgrade samba-x86Upgrade samba-32bitUpgrade libsmbldap0-32bitUpgrade samba-winbind-libsUpgrade libsamdb0Upgrade libnetapi0Upgrade libtalloc-develUpgrade libpdb0-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-policy-develUpgrade libsamba-passdb0-32bitUpgrade samba-pythonUpgrade samba-dcerpcUpgrade libtevent-util0-32bitUpgrade libndr0Upgrade libsamba-hostconfig0-32bitUpgrade libtdb-develUpgrade libsamba-errors0Upgrade samba-docUpgrade samba-libs-python3Upgrade libndr-standard0-32bitUpgrade libtevent-util0Upgrade libsmbldap2Upgrade samba-winbind-32bitUpgrade libsmbconf0Upgrade libndr-nbt-develUpgrade samba-develUpgrade libsmbclient-raw0Upgrade libsmbclient0Upgrade samba-client-x86Upgrade samba-libsUpgrade libsmbldap2-32bitUpgrade libtevent0Upgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade ctdbUpgrade libsamba-errors0-32bitUpgrade libldb-develUpgrade samba-winbindUpgrade sambaUpgrade libgensec0Upgrade python3-ldbUpgrade cifs-utils-develUpgrade libndr-krb5pac-develUpgrade libtevent0-x86Upgrade libtevent-develUpgrade libndr0-32bitUpgrade libsamba-util0Upgrade libtdb1Upgrade libdcerpc-binding0-32bitUpgrade samba-client-32bitUpgrade libdcerpc-atsvc-develUpgrade libwbclient0-32bitUpgrade libndr-nbt0-32bitUpgrade pam_cifscredsUpgrade libtdb1-x86Upgrade libgensec0-32bitUpgrade libtalloc2-32bitUpgrade samba-python3Upgrade libsmbconf-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbsharemodes-develUpgrade libndr-standard-develUpgrade samba-winbind-x86Upgrade libsmbclient0-x86Upgrade samba-libs-python3-32bitUpgrade samba-core-develUpgrade libtalloc1-x86Upgrade libldb1Upgrade libregistry-develUpgrade ldb-toolsUpgrade libtevent0-32bitUpgrade libdcerpc-atsvc0Upgrade libsamdb0-32bitUpgrade libsamba-passdb-develUpgrade samba-toolUpgrade samba-client-libsUpgrade libsamba-passdb0Upgrade libnetapi0-32bitUpgrade samba-client-langUpgrade libsamba-errors-develUpgrade libsmbclient-raw-develUpgrade libtalloc1-32bitUpgrade ldapsmbUpgrade libndr-develUpgrade libdcerpc-samr0Upgrade libdcerpc-samr-develUpgrade libdcerpc0Upgrade samba-ldb-ldapUpgrade libgensec-develUpgrade samba-winbind-libs-langUpgrade samba-dsdb-modulesUpgrade samba-krb-printingUpgrade libndr-standard0Upgrade samba-test-develUpgrade libtalloc1Upgrade libsamdb-develUpgrade libndr-krb5pac0Upgrade samba-clientUpgrade cifs-mountUpgrade libsamba-hostconfig-develUpgrade libsmbldap0Upgrade samba-ad-dcUpgrade libsamba-policy0Upgrade libsamba-credentials0Upgrade libregistry0Upgrade samba-testUpgrade samba-gpupdate | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade smbclientUpgrade smbfs | Nov 8, 2024 | Jun 25, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Jun 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub