The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Centos_linux | — | Upgrade libwbclient-develUpgrade samba4-pythonUpgrade samba4-develUpgrade samba-dcUpgrade samba-pidlUpgrade ctdbUpgrade samba4Upgrade samba4-swatUpgrade ctdb-develUpgrade samba4-winbindUpgrade samba-winbind-develUpgrade samba-glusterfsUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba4-dc-libsUpgrade samba-swatUpgrade samba4-dcUpgrade samba-test-develUpgrade samba4-pidlUpgrade samba-common-toolsUpgrade samba4-commonUpgrade samba-dc-libsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba4-libsUpgrade samba-develUpgrade samba4-testUpgrade samba-pythonUpgrade samba4-winbind-krb5-locatorUpgrade samba-domainjoin-guiUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba4-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-docUpgrade samba-clientUpgrade samba-common-libsUpgrade ctdb-testsUpgrade samba-test-libsUpgrade samba4-client | Jul 6, 2016 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Hpux | — | Update CIFS-Server to the latest version | Aug 11, 2017 | Mar 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-common-libsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba | Nov 30, 2017 | Mar 13, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 13, 2016 |
| Oracle_linux | — | Upgrade libwbclient-develUpgrade samba-develUpgrade samba4-dc-libsUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade sambaUpgrade samba-swatUpgrade samba-pythonUpgrade samba-dc-libsUpgrade samba4-testUpgrade samba-clientUpgrade samba-common-libsUpgrade samba4-commonUpgrade samba-winbind-krb5-locatorUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-docUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba4Upgrade samba4-swatUpgrade samba-test-develUpgrade samba-pidlUpgrade samba4-develUpgrade samba-domainjoin-guiUpgrade samba4-winbind-clientsUpgrade samba-winbind-develUpgrade samba-glusterfsUpgrade samba4-libsUpgrade samba-testUpgrade samba-libsUpgrade samba4-pythonUpgrade samba-client-libsUpgrade samba4-winbindUpgrade samba4-dcUpgrade libwbclientUpgrade samba4-pidlUpgrade samba-dcUpgrade samba4-client | Mar 22, 2016 | Mar 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 8, 2016 |
| Samba | — | Upgrade to Samba version 4.1.23Upgrade to Samba version 4.4.0rc4Upgrade to Samba version 4.2.9Upgrade to Samba version 4.3.6 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade libdcerpc-atsvc-develUpgrade libsamba-errors-develUpgrade libdcerpc0-32bitUpgrade libtalloc2-32bitUpgrade samba-winbind-32bitUpgrade libsmbldap2Upgrade libwbclient-develUpgrade libndr-krb5pac0Upgrade libldb1-32bitUpgrade samba-pythonUpgrade samba-python3Upgrade libsmbclient0Upgrade libdcerpc-develUpgrade libsmbldap0Upgrade libnetapi0-32bitUpgrade libsamba-util0Upgrade samba-test-develUpgrade libtdb1-32bitUpgrade libdcerpc-binding0Upgrade samba-32bitUpgrade libsamba-hostconfig-develUpgrade libndr0-32bitUpgrade libpdb0Upgrade libsmbclient0-32bitUpgrade libldb-develUpgrade libdcerpc0Upgrade libgensec0Upgrade libndr0Upgrade libdcerpc-samr-develUpgrade libndr-nbt-develUpgrade libsmbclient-raw0-32bitUpgrade samba-x86Upgrade libwbclient0-32bitUpgrade libsmbldap2-32bitUpgrade libtdb1Upgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade libsamdb0Upgrade libsamba-policy-develUpgrade samba-clientUpgrade libndr-nbt0-32bitUpgrade libnetapi-develUpgrade libsamba-errors0Upgrade libndr-develUpgrade libndr1Upgrade samba-krb-printingUpgrade samba-winbindUpgrade libdcerpc-binding0-32bitUpgrade samba-docUpgrade libdcerpc-atsvc0Upgrade samba-libs-python3Upgrade libsamba-passdb0Upgrade libsmbconf-develUpgrade libsmbclient-raw0Upgrade libwbclient0-x86Upgrade libndr-nbt0Upgrade samba-libs-python3-32bitUpgrade libsmbsharemodes-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-credentials-develUpgrade samba-core-develUpgrade sambaUpgrade libtevent-util0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb-develUpgrade libpdb-develUpgrade samba-cephUpgrade samba-client-x86Upgrade libgensec-develUpgrade ctdbUpgrade libregistry0Upgrade libsamba-policy-python3-develUpgrade libsmbconf0Upgrade libsmbconf0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc-samr0Upgrade libtdb1-x86Upgrade libsmbclient-raw-develUpgrade libsamdb-develUpgrade samba-client-32bitUpgrade libnetapi0Upgrade samba-winbind-x86Upgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade samba-libsUpgrade libndr-standard0-32bitUpgrade libtevent0-32bitUpgrade samba-kdcUpgrade libsamba-util0-32bitUpgrade samba-testUpgrade libtevent-util0Upgrade ldapsmbUpgrade libsamba-credentials0Upgrade libwbclient0Upgrade libtdb-develUpgrade libtevent-util-develUpgrade libtalloc2Upgrade samba-libs-32bitUpgrade libsmbldap0-32bitUpgrade libsmbclient0-x86Upgrade libsamba-policy0Upgrade samba-develUpgrade libsamba-hostconfig0Upgrade libldb1Upgrade libtalloc-develUpgrade libsmbclient-develUpgrade libsamdb0-32bitUpgrade libsamba-policy0-python3Upgrade libregistry-develUpgrade libsamba-util-develUpgrade libsamba-errors0-32bitUpgrade libtevent-develUpgrade libtevent0Upgrade libsmbldap-develUpgrade libgensec0-32bitUpgrade libndr-standard0Upgrade libsmbsharemodes0Upgrade libndr-standard-develUpgrade libpdb0-32bit | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade swat | Mar 13, 2016 | Mar 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub