smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Mar 10, 2010 |
| Samba | — | Upgrade to Samba version 3.4.7Upgrade to Samba version 3.3.12Upgrade to Samba version 3.5.1 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade samba-libs-python3-32bitUpgrade libldb-develUpgrade libwbclient0-32bitUpgrade libtdb-develUpgrade libsmbldap0Upgrade libsamba-errors0-32bitUpgrade samba-client-langUpgrade libsmbconf0Upgrade libndr-standard0Upgrade samba-test-develUpgrade samba-dcerpcUpgrade libdcerpc-atsvc0Upgrade libndr-krb5pac0-32bitUpgrade libndr-krb5pac-develUpgrade libndr0-32bitUpgrade libsamba-credentials-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-passdb0Upgrade cifs-utils-develUpgrade libsmbclient0Upgrade samba-clientUpgrade libsamba-passdb0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-atsvc-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-toolUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade python3-ldbUpgrade libnetapi-develUpgrade libsamba-errors-develUpgrade libsmbsharemodes-develUpgrade libtdb1-32bitUpgrade libndr-krb5pac0Upgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-util0Upgrade samba-libs-python3Upgrade libndr0Upgrade libdcerpc0Upgrade libsamba-hostconfig-develUpgrade libsmbconf-develUpgrade libndr-nbt0-32bitUpgrade libldb1Upgrade samba-krb-printingUpgrade libsmbldap2Upgrade libdcerpc-binding0-32bitUpgrade samba-winbindUpgrade libsamdb0Upgrade pam_cifscredsUpgrade samba-ad-dcUpgrade samba-gpupdateUpgrade libdcerpc-binding0Upgrade libwbclient-develUpgrade samba-x86Upgrade samba-winbind-libsUpgrade libnetapi0Upgrade ctdbUpgrade ctdb-pcp-pmdaUpgrade libsmbclient-raw0Upgrade libndr-develUpgrade samba-ad-dc-libsUpgrade libtalloc2-x86Upgrade libgensec0Upgrade libregistry0Upgrade samba-docUpgrade samba-python3Upgrade libsmbconf0-32bitUpgrade libsamba-credentials0-32bitUpgrade samba-client-32bitUpgrade libndr-nbt-develUpgrade samba-libs-32bitUpgrade libpdb0Upgrade libsamba-util0-32bitUpgrade libtevent-util0Upgrade libsmbsharemodes0Upgrade libgensec0-32bitUpgrade libsmbclient-develUpgrade libndr-standard-develUpgrade libpdb-develUpgrade libtevent0-x86Upgrade libtevent-util-develUpgrade samba-ldb-ldapUpgrade samba-libsUpgrade samba-testUpgrade libpdb0-32bitUpgrade libsamba-passdb-develUpgrade sambaUpgrade libwbclient0-x86Upgrade libsamdb-develUpgrade libsamba-util-develUpgrade libtevent0Upgrade libsamba-hostconfig0Upgrade ldapsmbUpgrade libwbclient0Upgrade libsmbldap0-32bitUpgrade libtdb1-x86Upgrade libtalloc-develUpgrade libregistry-develUpgrade samba-winbind-x86Upgrade samba-winbind-libs-langUpgrade libsmbldap2-32bitUpgrade samba-client-x86Upgrade libtevent-util0-32bitUpgrade samba-client-libsUpgrade cifs-utilsUpgrade samba-32bitUpgrade libsamba-policy0Upgrade libgensec-develUpgrade wb-cifs-idmap-pluginUpgrade libsamba-policy-develUpgrade samba-kdcUpgrade libdcerpc-samr0Upgrade libtevent-develUpgrade libndr-nbt0Upgrade libsmbldap-develUpgrade libndr-standard0-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-develUpgrade libnetapi0-32bitUpgrade libtalloc2Upgrade ldb-toolsUpgrade samba-develUpgrade libtalloc2-32bitUpgrade samba-dsdb-modulesUpgrade libsmbclient0-x86Upgrade libtevent0-32bitUpgrade samba-pythonUpgrade libldb2Upgrade libdcerpc-samr-develUpgrade libtdb1Upgrade libsmbclient-raw-devel | Aug 9, 2024 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub