Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade web/server/apache-22 to version 2.2.25-0.175.1.11.0.4.0 on Solaris 11.1Upgrade web/server/apache-22/documentation to version 2.2.25-0.175.1.11.0.4.0 on Solaris 11.1 | May 29, 2017 | Mar 19, 2013 |
| Samba | — | Upgrade to Samba version 4.0.4 | Nov 13, 2013 | Mar 19, 2013 |
| Suse | — | Upgrade libndr0-32bitUpgrade samba-libs-python3Upgrade samba-winbindUpgrade libndr-krb5pac0Upgrade libdcerpc-samr-develUpgrade libsamba-util-develUpgrade libsamba-errors-develUpgrade libsmbldap2-32bitUpgrade samba-32bitUpgrade libsmbclient0-32bitUpgrade libtevent-util0Upgrade libwbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libsamba-errors0Upgrade libndr-develUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade samba-docUpgrade libsmbclient-raw0Upgrade libsmbldap2Upgrade libsmbldap-develUpgrade samba-core-develUpgrade libnetapi-develUpgrade libsamba-passdb0-32bitUpgrade libpdb-develUpgrade libndr0Upgrade samba-winbind-32bitUpgrade libsamba-credentials-develUpgrade libsamdb0Upgrade libdcerpc-develUpgrade libsmbldap0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient-raw-develUpgrade samba-libs-python3-32bitUpgrade libnetapi0Upgrade libsamba-policy-develUpgrade libtevent-util0-32bitUpgrade samba-pythonUpgrade libdcerpc-atsvc0Upgrade libsamba-util0Upgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade sambaUpgrade libpdb0Upgrade libndr-krb5pac-develUpgrade libdcerpc0-32bitUpgrade libsmbconf0-32bitUpgrade libndr-nbt0Upgrade libndr-nbt-develUpgrade libsamba-policy0Upgrade libdcerpc-binding0Upgrade libsmbclient0Upgrade libsamba-credentials0-32bitUpgrade libndr-standard-develUpgrade samba-libsUpgrade samba-client-32bitUpgrade libsmbclient-develUpgrade libdcerpc-binding0-32bitUpgrade libregistry0Upgrade samba-clientUpgrade libwbclient0Upgrade libgensec0Upgrade samba-dsdb-modulesUpgrade libsmbsharemodes-develUpgrade libsamba-util0-32bitUpgrade libsamba-hostconfig-develUpgrade libgensec0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamdb-develUpgrade libsamdb0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-credentials0Upgrade libndr-nbt0-32bitUpgrade libtevent-util-develUpgrade samba-libs-32bitUpgrade libdcerpc0Upgrade samba-kdcUpgrade samba-test-develUpgrade libsamba-passdb0Upgrade libdcerpc-atsvc-develUpgrade libnetapi0-32bitUpgrade libpdb0-32bitUpgrade libregistry-develUpgrade libdcerpc-samr0Upgrade libsamba-hostconfig0Upgrade libndr-krb5pac0-32bitUpgrade libgensec-develUpgrade libndr-standard0Upgrade libndr-standard0-32bit | Aug 9, 2024 | Mar 19, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub