The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Centos_linux | — | Upgrade samba4-dc-libsUpgrade samba-glusterfsUpgrade samba-commonUpgrade ctdbUpgrade samba4-pidlUpgrade samba-test-develUpgrade samba4-pythonUpgrade samba4-swatUpgrade samba4-winbindUpgrade libwbclient-develUpgrade samba-pidlUpgrade ctdb-develUpgrade samba4Upgrade samba-dcUpgrade samba4-develUpgrade samba-winbind-develUpgrade samba4-dcUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-swatUpgrade libsmbclientUpgrade ctdb-testsUpgrade samba-develUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-clientsUpgrade samba-domainjoin-guiUpgrade samba4-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libwbclientUpgrade samba-docUpgrade samba4-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba4-testUpgrade samba-client-libsUpgrade samba4-clientUpgrade samba-winbindUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-pythonUpgrade samba-dc-libs | Jul 6, 2016 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Hpux | — | Update CIFS-Server to the latest version | Aug 11, 2017 | Mar 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade libsmbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-winbind-clients | Nov 30, 2017 | Mar 13, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 13, 2016 |
| Oracle_linux | — | Upgrade samba4-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba4-commonUpgrade sambaUpgrade samba4-testUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba-pythonUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-develUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba4-dc-libsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4Upgrade samba-libsUpgrade samba-test-develUpgrade samba4-pythonUpgrade samba-pidlUpgrade samba-testUpgrade samba4-develUpgrade samba4-pidlUpgrade samba4-clientUpgrade samba4-swatUpgrade samba-client-libsUpgrade samba-glusterfsUpgrade samba-domainjoin-guiUpgrade samba-winbind-develUpgrade samba4-winbind-clientsUpgrade samba-dcUpgrade samba4-dcUpgrade samba4-winbindUpgrade libwbclient | Mar 22, 2016 | Mar 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 8, 2016 |
| Samba | — | Upgrade to Samba version 4.1.23Upgrade to Samba version 4.2.9Upgrade to Samba version 4.4.0rc4Upgrade to Samba version 4.3.6 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade samba-x86Upgrade samba-winbind-32bitUpgrade libsmbsharemodes-develUpgrade libwbclient0-x86Upgrade samba-32bitUpgrade libsamba-policy-develUpgrade libndr-nbt0Upgrade libtalloc2-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0-32bitUpgrade libwbclient0-32bitUpgrade libsmbldap2Upgrade libndr1-32bitUpgrade libsmbclient-raw0-32bitUpgrade libtdb1-32bitUpgrade libdcerpc0Upgrade samba-python3Upgrade samba-docUpgrade samba-core-develUpgrade libsmbldap2-32bitUpgrade libldb1-32bitUpgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libsamba-errors0Upgrade libdcerpc-atsvc-develUpgrade libdcerpc-atsvc0Upgrade samba-pythonUpgrade samba-krb-printingUpgrade libndr-develUpgrade libndr0Upgrade libtdb1Upgrade sambaUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-binding0Upgrade libsmbclient-raw0Upgrade libpdb0Upgrade libndr1Upgrade samba-clientUpgrade libsmbclient0-32bitUpgrade libdcerpc-develUpgrade libnetapi0-32bitUpgrade libtevent-util0-32bitUpgrade libdcerpc0-32bitUpgrade libsamba-util0Upgrade libgensec0Upgrade samba-libs-python3Upgrade libsmbconf-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr0-32bitUpgrade libsmbldap0Upgrade libsamba-credentials-develUpgrade libldb-develUpgrade libsamba-passdb0Upgrade libsmbclient0Upgrade libdcerpc-samr-develUpgrade libnetapi-develUpgrade samba-test-develUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libsamba-errors-develUpgrade libndr-nbt-develUpgrade samba-winbindUpgrade libsmbclient0-x86Upgrade libsamba-errors0-32bitUpgrade samba-cephUpgrade libtevent-util-develUpgrade libpdb0-32bitUpgrade libsmbsharemodes0Upgrade libndr-standard0-32bitUpgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade samba-libsUpgrade samba-kdcUpgrade libndr-standard-develUpgrade libsamba-policy0Upgrade samba-develUpgrade libregistry0Upgrade libdcerpc-samr0Upgrade libgensec-develUpgrade libtdb1-x86Upgrade samba-client-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap0-32bitUpgrade libsmbldap-develUpgrade libtevent0Upgrade libsamdb-develUpgrade ctdbUpgrade libsamba-policy-python3-develUpgrade libtevent-develUpgrade libnetapi0Upgrade libsmbclient-raw-develUpgrade libldb1Upgrade libtdb-develUpgrade samba-testUpgrade libsamba-util0-32bitUpgrade libtalloc-develUpgrade libsamba-credentials0Upgrade libsamba-util-develUpgrade libsmbclient-develUpgrade libpdb-develUpgrade libsamba-passdb-develUpgrade samba-libs-32bitUpgrade libndr-krb5pac0-32bitUpgrade libtevent0-32bitUpgrade samba-client-x86Upgrade libsamba-credentials0-32bitUpgrade samba-winbind-x86Upgrade libtalloc2Upgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libsmbconf0-32bitUpgrade libsamba-policy0-python3Upgrade libsamdb0-32bitUpgrade libwbclient0Upgrade libregistry-develUpgrade libtevent-util0Upgrade ldapsmbUpgrade libgensec0-32bitUpgrade libndr-standard0 | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade swat | Mar 13, 2016 | Mar 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub