The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Centos_linux | — | Upgrade samba4-swatUpgrade samba-testUpgrade ctdb-develUpgrade samba-commonUpgrade samba-winbind-develUpgrade samba4-pidlUpgrade libwbclient-develUpgrade samba4-develUpgrade samba-vfs-glusterfsUpgrade samba-test-develUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba4-pythonUpgrade ctdbUpgrade samba4-dcUpgrade samba-pidlUpgrade samba4Upgrade samba4-winbindUpgrade samba-glusterfsUpgrade samba-dcUpgrade samba-domainjoin-guiUpgrade ctdb-testsUpgrade samba-clientUpgrade samba4-libsUpgrade samba-docUpgrade samba4-winbind-clientsUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade samba-common-libsUpgrade samba4-clientUpgrade samba-libsUpgrade samba4-commonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-pythonUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-winbindUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba | Jul 6, 2016 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Hpux | — | Update CIFS-Server to the latest version | Aug 11, 2017 | Mar 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-client-libsUpgrade samba-pythonUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclient | Nov 30, 2017 | Mar 13, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 13, 2016 |
| Oracle_linux | — | Upgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-client-libsUpgrade samba4-clientUpgrade samba-domainjoin-guiUpgrade samba4-swatUpgrade samba4-dcUpgrade samba4-libsUpgrade samba-dcUpgrade samba-testUpgrade samba4-pythonUpgrade samba-glusterfsUpgrade samba4-pidlUpgrade samba-test-develUpgrade samba4Upgrade samba4-winbindUpgrade samba-swatUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-pythonUpgrade samba4-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba4-dc-libsUpgrade samba-commonUpgrade samba4-winbind-krb5-locatorUpgrade samba-docUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-develUpgrade samba-common-toolsUpgrade libsmbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba4-commonUpgrade sambaUpgrade libsmbclientUpgrade samba-common-libs | Mar 22, 2016 | Mar 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 8, 2016 |
| Samba | — | Upgrade to Samba version 4.4.0rc4Upgrade to Samba version 4.3.6Upgrade to Samba version 4.2.9Upgrade to Samba version 4.1.23 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade samba-libs-32bitUpgrade samba-cephUpgrade libwbclient0Upgrade libsamba-util-develUpgrade libsamba-util0-32bitUpgrade libsmbclient-develUpgrade libsamba-passdb-develUpgrade libpdb-develUpgrade samba-winbind-x86Upgrade libldb1Upgrade samba-libsUpgrade libndr-standard0Upgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade libsmbsharemodes0Upgrade libndr-standard0-32bitUpgrade libsamba-errors0-32bitUpgrade libsmbldap0-32bitUpgrade libpdb0-32bitUpgrade libsmbldap-develUpgrade libsmbconf0-32bitUpgrade libgensec0-32bitUpgrade samba-kdcUpgrade libregistry-develUpgrade libndr-standard-develUpgrade libsamdb0-32bitUpgrade libdcerpc-samr0Upgrade libtevent-util0Upgrade libsamba-credentials0Upgrade libsamba-hostconfig0Upgrade samba-dsdb-modulesUpgrade libregistry0Upgrade libsmbclient0-x86Upgrade samba-develUpgrade samba-client-32bitUpgrade ldapsmbUpgrade libtdb1-x86Upgrade libsamba-policy0-python3Upgrade libgensec-develUpgrade libsamdb-develUpgrade libtevent-develUpgrade ctdbUpgrade libtevent0Upgrade libsamba-policy-python3-develUpgrade libnetapi0Upgrade libtalloc2Upgrade libsmbclient-raw-develUpgrade libtevent-util-develUpgrade libndr-krb5pac0-32bitUpgrade samba-client-x86Upgrade libsamba-credentials0-32bitUpgrade libtdb-develUpgrade samba-testUpgrade libtalloc-develUpgrade libtevent0-32bitUpgrade libsamba-policy0Upgrade libsmbconf0Upgrade libsamba-util0Upgrade libdcerpc-samr-develUpgrade libgensec0Upgrade libsamba-errors-develUpgrade libndr0Upgrade samba-python3Upgrade libdcerpc-atsvc-develUpgrade libndr-krb5pac0Upgrade libtalloc2-32bitUpgrade libtdb1Upgrade samba-libs-python3-32bitUpgrade libsamba-errors0Upgrade samba-pythonUpgrade libsamba-passdb0Upgrade libndr-nbt0Upgrade libsmbclient0Upgrade libsmbconf-develUpgrade libldb-develUpgrade libndr-nbt0-32bitUpgrade libsmbldap2Upgrade libwbclient0-32bitUpgrade libsmbclient-raw0-32bitUpgrade samba-x86Upgrade libsamdb0Upgrade libsmbldap2-32bitUpgrade libndr1-32bitUpgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0Upgrade libdcerpc-binding0Upgrade sambaUpgrade libldb1-32bitUpgrade libdcerpc-atsvc0Upgrade libndr1Upgrade samba-krb-printingUpgrade libndr-develUpgrade libsamba-policy-develUpgrade samba-docUpgrade libwbclient0-x86Upgrade libsmbclient0-32bitUpgrade libsmbsharemodes-develUpgrade samba-libs-python3Upgrade libndr0-32bitUpgrade samba-clientUpgrade samba-32bitUpgrade libsamba-credentials-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-test-develUpgrade libpdb0Upgrade libndr-krb5pac-develUpgrade libdcerpc-develUpgrade libnetapi0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-winbindUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libtdb1-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap0Upgrade libdcerpc-binding0-32bit | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade swatUpgrade samba | Mar 13, 2016 | Mar 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub