The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Apr 30, 2012 |
| Centos_linux | — | Upgrade samba-winbindUpgrade samba3x-swatUpgrade samba-winbind-clientsUpgrade samba3x-winbindUpgrade samba-swatUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba3x-clientUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-docUpgrade sambaUpgrade samba-commonUpgrade samba3x-docUpgrade samba-winbind-develUpgrade samba3x-commonUpgrade samba-domainjoin-guiUpgrade samba3x-domainjoin-guiUpgrade samba3x-winbind-develUpgrade samba3x | Dec 1, 2016 | Apr 30, 2012 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 30, 2012 |
| Freebsd | — | Upgrade samba36Upgrade samba35Upgrade samba34 | Dec 10, 2025 | Apr 30, 2012 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | Apr 30, 2012 |
| Hpux | — | Update CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Development.CIFS-PRG to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest version | Aug 11, 2017 | Apr 30, 2012 |
| Oracle Solaris | — | Upgrade service/network/samba to version 3.5.15-0.175.0.8.0.3.0 on Solaris 11.0 | May 29, 2017 | Apr 30, 2012 |
| Oracle_linux | — | Upgrade samba3x-swatUpgrade samba-clientUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade sambaUpgrade samba3x-winbind-develUpgrade samba3x-winbindUpgrade samba-swatUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-commonUpgrade samba3x-commonUpgrade samba3xUpgrade samba-winbind-develUpgrade samba3x-clientUpgrade samba3x-domainjoin-guiUpgrade libsmbclientUpgrade samba3x-doc | Oct 16, 2024 | Apr 30, 2012 |
| Samba | — | Upgrade to Samba version 3.4.17Upgrade to Samba version 3.5.15Upgrade to Samba version 3.6.5 | Nov 13, 2013 | Apr 30, 2012 |
| Suse | — | Upgrade libtdb1Upgrade libsamba-hostconfig0Upgrade libwbclient-develUpgrade samba-clientUpgrade libwbclient0Upgrade libsmbldap0Upgrade libnetapi-develUpgrade libpdb0-32bitUpgrade samba-develUpgrade samba-gpupdateUpgrade libsmbclient-develUpgrade samba-client-langUpgrade samba-ad-dcUpgrade libsmbldap2Upgrade samba-krb-printingUpgrade libsmbclient-raw0-32bitUpgrade libnetapi0Upgrade samba-docUpgrade libndr-standard0Upgrade libtdb1-32bitUpgrade libsamba-policy-develUpgrade samba-toolUpgrade libndr-krb5pac-develUpgrade samba-winbindUpgrade libsmbconf-develUpgrade libtdb-develUpgrade libpdb0Upgrade libpdb-develUpgrade libsmbclient-raw-develUpgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-atsvc0Upgrade libwbclient0-32bitUpgrade libsmbldap2-32bitUpgrade libsmbsharemodes0Upgrade samba-pythonUpgrade libdcerpc-develUpgrade sambaUpgrade libsmbldap0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-util0Upgrade libndr0-32bitUpgrade libregistry0Upgrade samba-dcerpcUpgrade samba-x86Upgrade libtalloc2-32bitUpgrade libsamba-util-develUpgrade samba-ad-dc-libsUpgrade libtevent-util0Upgrade libndr-nbt0Upgrade libsmbclient0Upgrade samba-python3Upgrade samba-ldb-ldapUpgrade libsmbclient0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc0-32bitUpgrade libldb1-32bitUpgrade libdcerpc-binding0Upgrade libnetapi0-32bitUpgrade libndr-krb5pac0Upgrade libsamba-credentials0-32bitUpgrade samba-libs-python3Upgrade samba-libs-32bitUpgrade samba-core-develUpgrade samba-winbind-libsUpgrade libregistry-develUpgrade ldapsmbUpgrade libldb2Upgrade libwbclient0-x86Upgrade ctdb-pcp-pmdaUpgrade libsamba-errors0-32bitUpgrade libldb-develUpgrade libsamba-errors0Upgrade libndr-nbt-develUpgrade libsamdb0Upgrade libsamba-passdb0-32bitUpgrade samba-winbind-libs-langUpgrade libsmbconf0Upgrade samba-testUpgrade libndr-standard-develUpgrade libtalloc2Upgrade libdcerpc0Upgrade libsamba-passdb-develUpgrade samba-test-develUpgrade libsmbldap-develUpgrade samba-dsdb-modulesUpgrade samba-libs-python3-32bitUpgrade ldb-toolsUpgrade samba-kdcUpgrade libsamba-policy0Upgrade libgensec0-32bitUpgrade samba-32bitUpgrade libsmbsharemodes-develUpgrade libtalloc-develUpgrade samba-winbind-x86Upgrade libsamba-errors-develUpgrade libtevent-util-develUpgrade libndr0Upgrade libsamba-passdb0Upgrade libtevent-util0-32bitUpgrade samba-client-32bitUpgrade libtevent-develUpgrade libndr-nbt0-32bitUpgrade libgensec-develUpgrade ctdbUpgrade libtevent0-32bitUpgrade libsamba-credentials0Upgrade libsmbclient0-x86Upgrade libsmbconf0-32bitUpgrade samba-client-libsUpgrade python3-ldbUpgrade libtevent0Upgrade libsamdb0-32bitUpgrade libsamba-hostconfig-develUpgrade libgensec0Upgrade libsmbclient-raw0Upgrade libdcerpc-atsvc-develUpgrade libldb1Upgrade libtdb1-x86Upgrade libsamba-util0-32bitUpgrade libdcerpc-samr0Upgrade samba-client-x86Upgrade libdcerpc-binding0-32bitUpgrade samba-libsUpgrade libtalloc2-x86Upgrade libsamdb-develUpgrade libndr-standard0-32bitUpgrade libndr-develUpgrade libtevent0-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Apr 30, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub