Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 17, 2015 |
| Freebsd | — | Upgrade samba4Upgrade samba41 | Dec 10, 2025 | Jan 16, 2015 |
| Samba | — | Upgrade to Samba version 4.1.16 | Jan 19, 2015 | Jan 16, 2015 |
| Suse | — | Upgrade libndr-nbt0-32bitUpgrade libsmbldap0Upgrade libsamba-hostconfig-develUpgrade libsamdb-develUpgrade libdcerpc-atsvc0Upgrade samba-core-develUpgrade samba-dsdb-modulesUpgrade libsamba-hostconfig0-32bitUpgrade libgensec0-32bitUpgrade libwbclient-develUpgrade libsamba-passdb-develUpgrade samba-test-develUpgrade libndr1-32bitUpgrade libsamba-passdb0Upgrade libregistry-develUpgrade libndr-standard-develUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libsamba-errors0Upgrade libsmbldap2Upgrade libndr-standard0-32bitUpgrade samba-libs-python3-32bitUpgrade libnetapi0-32bitUpgrade libsmbconf-develUpgrade libdcerpc-binding0-32bitUpgrade libndr-develUpgrade libregistry0Upgrade libgensec-develUpgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade libsamba-policy0Upgrade libdcerpc-samr-develUpgrade libsamdb0-32bitUpgrade libsmbclient-raw-develUpgrade libsamba-util0Upgrade libsmbclient-raw0-32bitUpgrade samba-client-32bitUpgrade samba-python3Upgrade libdcerpc-samr0Upgrade libndr-krb5pac0Upgrade libwbclient0-32bitUpgrade libndr-krb5pac-develUpgrade libdcerpc-atsvc-develUpgrade libndr-standard0Upgrade libsamba-credentials-develUpgrade samba-cephUpgrade libndr0Upgrade libsmbclient-develUpgrade libsmbldap0-32bitUpgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libsmbconf0-32bitUpgrade libnetapi0Upgrade libsmbclient0Upgrade libsmbldap-develUpgrade libtevent-util-develUpgrade sambaUpgrade libsamba-credentials0Upgrade libsamdb0Upgrade libtevent-util0Upgrade samba-libs-python3Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade libndr-nbt0Upgrade libdcerpc0-32bitUpgrade libndr1Upgrade libsmbclient-raw0Upgrade libsamba-credentials0-32bitUpgrade samba-32bitUpgrade libdcerpc-binding0Upgrade libndr-nbt-develUpgrade libsamba-policy0-python3Upgrade samba-winbindUpgrade samba-libsUpgrade libsamba-errors0-32bitUpgrade samba-pythonUpgrade libsmbclient0-32bitUpgrade libwbclient0Upgrade libtevent-util0-32bitUpgrade libdcerpc-develUpgrade libgensec0Upgrade samba-docUpgrade samba-kdcUpgrade ctdbUpgrade libsamba-policy-develUpgrade samba-winbind-32bitUpgrade libsamba-util0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-util-develUpgrade libnetapi-devel | Dec 18, 2015 | Jan 16, 2015 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jan 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub