The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 30, 2012 |
| Centos_linux | — | Upgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba3x-swatUpgrade samba3x-clientUpgrade samba3x-winbindUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-swatUpgrade samba-docUpgrade samba-clientUpgrade samba3x-winbind-develUpgrade samba3x-commonUpgrade samba-winbind-develUpgrade samba3xUpgrade samba-domainjoin-guiUpgrade samba3x-domainjoin-guiUpgrade samba3x-docUpgrade samba-common | Dec 1, 2016 | Apr 30, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 30, 2012 |
| Freebsd | — | Upgrade samba35Upgrade samba34Upgrade samba36 | Dec 10, 2025 | Apr 30, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 30, 2012 |
| Hpux | — | Update CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest version | Aug 11, 2017 | Apr 30, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.15-0.175.0.8.0.3.0 on Solaris 11.0 | May 29, 2017 | Apr 30, 2012 |
| Oracle_linux | — | Upgrade samba-domainjoin-guiUpgrade samba-clientUpgrade samba-docUpgrade sambaUpgrade samba3x-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade samba3x-winbind-develUpgrade samba3x-swatUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba3x-clientUpgrade libsmbclientUpgrade samba-winbind-develUpgrade samba3xUpgrade samba3x-docUpgrade samba3x-commonUpgrade samba-commonUpgrade samba3x-domainjoin-gui | Oct 16, 2024 | Apr 30, 2012 |
| Samba | — | Upgrade to Samba version 3.4.17Upgrade to Samba version 3.5.15Upgrade to Samba version 3.6.5 | Nov 13, 2013 | Apr 30, 2012 |
| Suse | — | Upgrade libtevent0Upgrade libndr-standard-develUpgrade libgensec-develUpgrade samba-client-32bitUpgrade ctdbUpgrade samba-kdcUpgrade samba-testUpgrade libsamba-credentials0Upgrade libndr-standard0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade samba-libsUpgrade libtevent-develUpgrade samba-client-x86Upgrade libgensec0-32bitUpgrade libtalloc-develUpgrade libsmbldap-develUpgrade libndr-nbt0-32bitUpgrade libndr0Upgrade libdcerpc0Upgrade libsmbconf0-32bitUpgrade libtevent0-32bitUpgrade libtevent-util-develUpgrade libsamba-errors-develUpgrade libtevent0-x86Upgrade samba-test-develUpgrade ldb-toolsUpgrade libsmbclient0-x86Upgrade libtevent-util0-32bitUpgrade libsmbconf0Upgrade libsamdb-develUpgrade libsmbclient-raw0Upgrade samba-winbind-libs-langUpgrade libsamba-policy0Upgrade samba-dsdb-modulesUpgrade python3-ldbUpgrade libgensec0Upgrade libsamba-hostconfig-develUpgrade samba-client-libsUpgrade libdcerpc-samr0Upgrade libdcerpc-atsvc-develUpgrade samba-libs-python3-32bitUpgrade libtalloc2-x86Upgrade samba-winbind-x86Upgrade libdcerpc-binding0-32bitUpgrade libsamdb0-32bitUpgrade libtdb1-x86Upgrade libtalloc2Upgrade libsamba-passdb0Upgrade libsmbsharemodes-develUpgrade libldb1Upgrade samba-32bitUpgrade libndr-develUpgrade libndr-nbt0Upgrade libsmbclient0Upgrade libsamba-util-develUpgrade libsmbldap0Upgrade samba-pythonUpgrade samba-ldb-ldapUpgrade libdcerpc0-32bitUpgrade libnetapi0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc-develUpgrade libldb1-32bitUpgrade libsmbclient-develUpgrade libpdb-develUpgrade libdcerpc-binding0Upgrade libsamba-credentials-develUpgrade samba-libs-32bitUpgrade samba-toolUpgrade libwbclient0-32bitUpgrade samba-winbindUpgrade libdcerpc-atsvc0Upgrade sambaUpgrade libsmbldap2-32bitUpgrade libndr0-32bitUpgrade samba-winbind-libsUpgrade libsamdb0Upgrade libsamba-hostconfig0Upgrade libsamba-policy-develUpgrade libwbclient0-x86Upgrade libsamba-credentials0-32bitUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade samba-ad-dcUpgrade samba-krb-printingUpgrade libtdb1Upgrade samba-gpupdateUpgrade samba-libs-python3Upgrade libndr-nbt-develUpgrade libpdb0-32bitUpgrade libnetapi-develUpgrade samba-clientUpgrade libsmbldap2Upgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade samba-develUpgrade samba-client-langUpgrade libsmbsharemodes0Upgrade libldb2Upgrade libsmbclient-raw-develUpgrade libpdb0Upgrade ldapsmbUpgrade libndr-krb5pac0Upgrade samba-x86Upgrade libnetapi0Upgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade libsmbldap0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util0Upgrade samba-ad-dc-libsUpgrade libsamba-hostconfig0-32bitUpgrade libregistry0Upgrade libtdb-develUpgrade libldb-develUpgrade libsmbconf-develUpgrade libsmbclient-raw0-32bitUpgrade samba-python3Upgrade libtalloc2-32bitUpgrade libndr-krb5pac-develUpgrade libregistry-develUpgrade samba-docUpgrade samba-dcerpcUpgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade libtdb1-32bitUpgrade ctdb-pcp-pmdaUpgrade libtevent-util0Upgrade libwbclient0 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 30, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub