The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 30, 2017 | Mar 13, 2016 |
| Centos_linux | — | Upgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba4-winbind-krb5-locatorUpgrade samba-pythonUpgrade samba-domainjoin-guiUpgrade samba-client-libsUpgrade samba4-testUpgrade samba-libsUpgrade libsmbclient-develUpgrade ctdb-testsUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-develUpgrade libsmbclientUpgrade samba4-libsUpgrade samba4-commonUpgrade samba4-clientUpgrade samba-docUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-clientUpgrade sambaUpgrade samba4-winbind-clientsUpgrade samba-testUpgrade samba4-dcUpgrade samba4-pidlUpgrade samba-test-develUpgrade samba-swatUpgrade samba4-swatUpgrade samba-pidlUpgrade samba4Upgrade samba4-pythonUpgrade samba4-dc-libsUpgrade ctdbUpgrade samba4-develUpgrade samba-winbind-develUpgrade libwbclient-develUpgrade samba4-winbindUpgrade samba-commonUpgrade samba-dcUpgrade ctdb-develUpgrade samba-vfs-glusterfsUpgrade samba-glusterfs | Jul 6, 2016 | Mar 13, 2016 |
| Debian | — | Upgrade samba | Mar 14, 2016 | Mar 12, 2016 |
| Hpux | — | Update CIFS-Server to the latest version | Aug 11, 2017 | Mar 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade samba-pythonUpgrade libwbclientUpgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclientUpgrade samba-libs | Nov 30, 2017 | Mar 13, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 13, 2016 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-docUpgrade samba-swatUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-develUpgrade samba4-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-commonUpgrade libwbclient-develUpgrade samba-pythonUpgrade samba4-dc-libsUpgrade samba4-testUpgrade samba-winbindUpgrade samba-winbind-develUpgrade samba-client-libsUpgrade samba-testUpgrade samba-pidlUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-glusterfsUpgrade samba-domainjoin-guiUpgrade samba4-swatUpgrade samba4-pidlUpgrade samba-dcUpgrade samba4-pythonUpgrade samba4-winbindUpgrade samba4-dcUpgrade libwbclientUpgrade samba4-develUpgrade samba4-clientUpgrade samba4-libsUpgrade samba4Upgrade samba-test-devel | Mar 22, 2016 | Mar 13, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 8, 2016 |
| Samba | — | Upgrade to Samba version 4.1.23Upgrade to Samba version 4.2.9Upgrade to Samba version 4.3.6Upgrade to Samba version 4.4.0rc4 | Mar 24, 2016 | Mar 13, 2016 |
| Suse | — | Upgrade libsamba-credentials0-32bitUpgrade libtevent0Upgrade libsamdb-develUpgrade libtevent-develUpgrade libsmbclient-raw-develUpgrade libsamba-policy-python3-develUpgrade ctdbUpgrade libnetapi0Upgrade libsmbclient-develUpgrade libsamba-util0-32bitUpgrade libsamba-util-develUpgrade libtdb-develUpgrade libtalloc-develUpgrade libldb1Upgrade samba-testUpgrade libtalloc2Upgrade libsmbsharemodes0Upgrade libndr-standard0Upgrade libpdb0-32bitUpgrade libpdb-develUpgrade libtevent0-x86Upgrade libsmbldap0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr-standard0-32bitUpgrade samba-libsUpgrade libgensec0-32bitUpgrade libtevent0-32bitUpgrade libtevent-util-develUpgrade libsamba-policy0Upgrade samba-dsdb-modulesUpgrade libndr-krb5pac0-32bitUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade libsmbclient0-x86Upgrade samba-cephUpgrade libtdb1-x86Upgrade libsamba-policy0-python3Upgrade libndr-standard-develUpgrade libsamba-hostconfig0Upgrade libtevent-util0Upgrade libsamdb0-32bitUpgrade ldapsmbUpgrade libwbclient0Upgrade libsamba-credentials0Upgrade samba-kdcUpgrade libsmbconf0-32bitUpgrade libsmbldap-develUpgrade samba-client-32bitUpgrade libregistry0Upgrade libgensec-develUpgrade libdcerpc-samr0Upgrade samba-libs-32bitUpgrade libregistry-develUpgrade samba-develUpgrade samba-winbind-x86Upgrade samba-client-x86Upgrade libtalloc2-x86Upgrade libsamba-policy-develUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libndr0Upgrade samba-x86Upgrade libsamba-passdb0-32bitUpgrade libtdb1-32bitUpgrade libsmbldap2-32bitUpgrade libtevent-util0-32bitUpgrade libsmbldap2Upgrade libndr1-32bitUpgrade libndr-nbt0-32bitUpgrade libsamdb0Upgrade libsmbclient-raw0Upgrade libndr-krb5pac-develUpgrade libsmbldap0Upgrade libndr-nbt0Upgrade libsmbconf-develUpgrade libsamba-passdb0Upgrade libldb-develUpgrade libsmbclient0Upgrade libdcerpc-binding0Upgrade libsamba-errors0Upgrade samba-krb-printingUpgrade libdcerpc-binding0-32bitUpgrade libndr1Upgrade libnetapi0-32bitUpgrade libdcerpc-atsvc0Upgrade libndr-develUpgrade libdcerpc0Upgrade samba-libs-python3Upgrade libsmbsharemodes-develUpgrade libwbclient0-x86Upgrade libwbclient0-32bitUpgrade samba-32bitUpgrade libgensec0Upgrade libnetapi-develUpgrade libsamba-hostconfig-develUpgrade samba-winbindUpgrade libsamba-util0Upgrade samba-test-develUpgrade libndr0-32bitUpgrade libdcerpc0-32bitUpgrade libdcerpc-develUpgrade libsamba-credentials-develUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade libtalloc2-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-clientUpgrade libpdb0Upgrade libsamba-errors-develUpgrade libsmbclient0-32bitUpgrade samba-pythonUpgrade libldb1-32bitUpgrade libndr-krb5pac0Upgrade samba-python3Upgrade libdcerpc-atsvc-develUpgrade libwbclient-develUpgrade libsmbclient-raw0-32bitUpgrade libtdb1Upgrade samba | Mar 22, 2016 | Mar 13, 2016 |
| Ubuntu | — | Upgrade sambaUpgrade swat | Mar 13, 2016 | Mar 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub