The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-swat | Dec 1, 2016 | Jun 24, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Jun 24, 2009 |
| Samba | — | Upgrade to Samba version 3.0.35Upgrade to Samba version 3.3.6Upgrade to Samba version 3.2.13 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade libldb-develUpgrade samba-docUpgrade libnetapi-develUpgrade libwbclient-develUpgrade sambaUpgrade libndr0Upgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libsamba-credentials0-32bitUpgrade libtevent-util0Upgrade ctdbUpgrade libpdb0-32bitUpgrade cifs-utilsUpgrade libsmbclient0Upgrade samba-kdcUpgrade samba-winbind-libsUpgrade libwbclient0Upgrade libgensec0Upgrade libdcerpc-develUpgrade libsamba-util0-32bitUpgrade libsamba-errors0Upgrade libsamba-policy-develUpgrade libsmbldap0-32bitUpgrade libndr-nbt0Upgrade libtalloc2Upgrade libtalloc-develUpgrade libsamba-credentials-develUpgrade libtdb-develUpgrade libdcerpc0-32bitUpgrade wb-cifs-idmap-pluginUpgrade libsmbclient-raw0Upgrade libwbclient0-x86Upgrade ctdb-pcp-pmdaUpgrade libsmbldap-develUpgrade libsmbclient-develUpgrade samba-pythonUpgrade samba-winbindUpgrade libsmbconf0-32bitUpgrade samba-develUpgrade samba-32bitUpgrade libsmbldap2Upgrade libsamba-hostconfig0Upgrade libsamba-hostconfig0-32bitUpgrade libtevent0Upgrade libtalloc2-x86Upgrade libpdb-develUpgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0Upgrade libsamdb0Upgrade libtevent-util-develUpgrade libtdb1-32bitUpgrade libsamba-util-develUpgrade samba-x86Upgrade libsmbsharemodes0Upgrade libsmbclient0-32bitUpgrade libldb2Upgrade samba-dcerpcUpgrade libndr-nbt-develUpgrade libndr-standard0-32bitUpgrade libsmbldap2-32bitUpgrade samba-ad-dc-libsUpgrade samba-client-x86Upgrade libnetapi0Upgrade samba-libs-32bitUpgrade samba-winbind-32bitUpgrade samba-libsUpgrade libpdb0Upgrade samba-libs-python3Upgrade samba-libs-python3-32bitUpgrade libwbclient0-32bitUpgrade libsmbconf-develUpgrade libndr-develUpgrade libtevent0-32bitUpgrade libsmbldap0Upgrade samba-winbind-x86Upgrade libsamba-policy0Upgrade libsmbclient0-x86Upgrade cifs-mountUpgrade samba-client-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtalloc2-32bitUpgrade libdcerpc-samr0Upgrade libtdb1-x86Upgrade libndr-standard-develUpgrade libsmbsharemodes-develUpgrade cifs-utils-develUpgrade libsamba-util0Upgrade libndr-krb5pac0Upgrade samba-test-develUpgrade libtalloc1Upgrade samba-ad-dcUpgrade libtalloc1-x86Upgrade libsamba-passdb0Upgrade libtdb1Upgrade libgensec-develUpgrade libdcerpc-samr-develUpgrade libdcerpc-atsvc0Upgrade libndr0-32bitUpgrade pam_cifscredsUpgrade libsamdb-develUpgrade samba-core-develUpgrade libndr-krb5pac-develUpgrade libtevent0-x86Upgrade libldb1Upgrade libtevent-develUpgrade libgensec0-32bitUpgrade samba-krb-printingUpgrade samba-gpupdateUpgrade libsamba-errors-develUpgrade samba-testUpgrade libsamba-hostconfig-develUpgrade ldb-toolsUpgrade samba-client-libsUpgrade samba-clientUpgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade samba-client-langUpgrade libdcerpc-atsvc-develUpgrade samba-winbind-libs-langUpgrade samba-ldb-ldapUpgrade libregistry0Upgrade libsamdb0-32bitUpgrade libsmbclient-raw-develUpgrade ldapsmbUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade samba-dsdb-modulesUpgrade samba-toolUpgrade libtalloc1-32bitUpgrade libndr-standard0Upgrade python3-ldbUpgrade samba-python3Upgrade libdcerpc-binding0-32bitUpgrade libregistry-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbclientUpgrade sambaUpgrade smbfs | Nov 8, 2024 | Jun 25, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Jun 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub