smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 10, 2010 |
| Samba | — | Upgrade to Samba version 3.5.1Upgrade to Samba version 3.3.12Upgrade to Samba version 3.4.7 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade libsamba-policy0Upgrade libgensec0-32bitUpgrade libldb2Upgrade libsamba-credentials0Upgrade libndr-nbt-develUpgrade libsmbsharemodes0Upgrade samba-pythonUpgrade samba-32bitUpgrade samba-dsdb-modulesUpgrade libsmbclient-develUpgrade libdcerpc-samr-develUpgrade ldb-toolsUpgrade samba-winbind-libs-langUpgrade samba-develUpgrade libwbclient0Upgrade libtalloc-develUpgrade libtdb1-x86Upgrade wb-cifs-idmap-pluginUpgrade libtevent0Upgrade libtevent-util0Upgrade libtevent-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbclient-raw-develUpgrade libtevent-util-develUpgrade libsamba-util-develUpgrade samba-testUpgrade ldapsmbUpgrade libndr-nbt0Upgrade libsamdb-develUpgrade libpdb-develUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade libsmbclient0-x86Upgrade libpdb0Upgrade libsmbldap0-32bitUpgrade samba-kdcUpgrade libpdb0-32bitUpgrade cifs-utilsUpgrade libsamba-passdb-develUpgrade libregistry-develUpgrade samba-client-32bitUpgrade libwbclient0-x86Upgrade samba-ldb-ldapUpgrade libdcerpc-samr0Upgrade libgensec-develUpgrade libdcerpc-develUpgrade libndr-standard0-32bitUpgrade libtevent0-x86Upgrade samba-libsUpgrade libtevent0-32bitUpgrade libtalloc2-32bitUpgrade samba-winbind-x86Upgrade samba-client-libsUpgrade libsamba-policy-develUpgrade libtevent-develUpgrade sambaUpgrade libsamba-hostconfig0Upgrade libtdb1Upgrade libnetapi0-32bitUpgrade samba-client-x86Upgrade libtalloc2Upgrade libsmbldap-develUpgrade libsamba-util0-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libdcerpc-atsvc0Upgrade libsmbclient0Upgrade python3-ldbUpgrade libsamba-hostconfig-develUpgrade libsmbsharemodes-develUpgrade libsmbclient0-32bitUpgrade samba-python3Upgrade libndr0Upgrade libndr0-32bitUpgrade libsmbldap2Upgrade libldb-develUpgrade libsamdb0-32bitUpgrade samba-libs-python3-32bitUpgrade libwbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade samba-client-langUpgrade libsmbconf0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-x86Upgrade ctdb-pcp-pmdaUpgrade samba-winbind-libsUpgrade pam_cifscredsUpgrade samba-libs-python3Upgrade libnetapi0Upgrade libsmbclient-raw0Upgrade libnetapi-develUpgrade samba-docUpgrade libsamba-credentials-develUpgrade libsamba-util0Upgrade samba-ad-dcUpgrade libndr-krb5pac0-32bitUpgrade libgensec0Upgrade libregistry0Upgrade ctdbUpgrade libsamba-credentials0-32bitUpgrade samba-ad-dc-libsUpgrade samba-dcerpcUpgrade libndr-standard0Upgrade libsamba-errors-develUpgrade samba-test-develUpgrade samba-winbindUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade samba-toolUpgrade samba-core-develUpgrade libsamba-passdb0Upgrade libndr-develUpgrade libsmbclient-raw0-32bitUpgrade libsamdb0Upgrade libdcerpc0Upgrade libsmbconf-develUpgrade libtdb-develUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade libtalloc2-x86Upgrade libndr-krb5pac0Upgrade libtdb1-32bitUpgrade libndr-krb5pac-develUpgrade libsmbconf0Upgrade cifs-utils-develUpgrade libsmbldap0Upgrade libdcerpc0-32bitUpgrade libldb1Upgrade samba-gpupdate | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub