Name: CVE-2017-12150: Channel Accessible by Non-Endpoint
Creator: Rapid7
Published: 2018-07-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-12150, CWE-300, CVSS 7.4, EPSS 0.13065

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.

CVSS Details

CVSS 3.1 Base Score: 7.4
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade samba	Jul 26, 2018	Jul 26, 2018
Amazon_linux	—	Upgrade samba	Oct 13, 2017	Sep 21, 2017
Centos_linux	—	Upgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-testUpgrade samba4-commonUpgrade samba-glusterfsUpgrade samba4-testUpgrade libwbclientUpgrade samba4-winbind-krb5-locatorUpgrade samba4-pidlUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba4-develUpgrade samba-winbind-krb5-locatorUpgrade samba4-libsUpgrade samba4-clientUpgrade samba-winbindUpgrade samba4Upgrade samba-dc-libsUpgrade samba4-dcUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba4-dc-libsUpgrade samba-pidlUpgrade samba4-winbindUpgrade samba-domainjoin-guiUpgrade samba-pythonUpgrade samba4-winbind-clientsUpgrade samba-develUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba4-pythonUpgrade samba-debuginfoUpgrade samba-docUpgrade samba-swatUpgrade samba-vfs-glusterfsUpgrade samba4-debuginfoUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-develUpgrade samba-dcUpgrade samba-test-libs	Sep 25, 2017	Sep 21, 2017
Debian	—	Upgrade samba	Sep 25, 2017	Sep 21, 2017
Hpux	—	Update CIFS-Server to the latest version	Jun 5, 2018	May 31, 2018
Huawei Euleros 2_0_sp1	—	Upgrade samba-winbindUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-common-libsUpgrade sambaUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclient	Nov 30, 2017	Sep 20, 2017
Huawei Euleros 2_0_sp2	—	Upgrade libwbclientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-python	Nov 30, 2017	Sep 20, 2017
Oracle Solaris	—	Upgrade service/network/samba to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3Upgrade library/samba/libsmbclient to version 4.4.16-0.175.3.25.0.3.0 on Solaris 11.3	Nov 30, 2017	Nov 30, 2017
Oracle_linux	—	Upgrade samba4-pythonUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba4Upgrade samba-pidlUpgrade samba-winbind-develUpgrade samba-test-libsUpgrade samba4-clientUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-dcUpgrade ctdbUpgrade samba-glusterfsUpgrade samba4-dc-libsUpgrade samba4-commonUpgrade samba4-dcUpgrade samba4-pidlUpgrade samba-develUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade sambaUpgrade samba-docUpgrade samba-winbindUpgrade samba-domainjoin-guiUpgrade ctdb-testsUpgrade samba-common-toolsUpgrade samba-libsUpgrade samba4-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-clientUpgrade samba4-develUpgrade samba4-libsUpgrade libsmbclient-develUpgrade samba4-testUpgrade samba4-winbindUpgrade samba-commonUpgrade samba-swatUpgrade samba-winbind-modulesUpgrade samba4-winbind-clientsUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locator	Sep 27, 2017	Sep 20, 2017
Redhat_linux	—	Upgrade samba-dcUpgrade samba-test-libsNo solution existsUpgrade samba4-dc-libsUpgrade libwbclient-develUpgrade samba4-pidlUpgrade samba-pidlUpgrade samba-testUpgrade samba-glusterfsUpgrade samba-vfs-glusterfsUpgrade samba4Upgrade samba4-commonUpgrade samba-develUpgrade samba-docUpgrade samba-domainjoin-guiUpgrade samba-krb5-printingUpgrade samba4-dcUpgrade samba-swatUpgrade samba4-libsUpgrade samba-libsUpgrade samba4-winbind-clientsUpgrade samba-pythonUpgrade samba-winbind-develUpgrade sambaUpgrade samba-client-libsUpgrade samba4-pythonUpgrade samba-common-libsUpgrade samba4-winbind-krb5-locatorUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba4-debuginfoUpgrade samba-winbind-clientsUpgrade samba4-develUpgrade samba4-clientUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba4-testUpgrade libsmbclient-develUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-clientUpgrade libwbclientUpgrade samba4-winbind	Oct 4, 2017	Sep 21, 2017
Samba	—	Upgrade to Samba version 4.4.16Upgrade to Samba version 4.5.14Upgrade to Samba version 4.6.8	Sep 29, 2017	Sep 29, 2017
Suse	—	Upgrade libsamba-credentials-develUpgrade sambaUpgrade samba-winbind-32bitUpgrade libregistry0Upgrade samba-docUpgrade samba-krb-printingUpgrade samba-x86Upgrade libsmbclient-raw0-32bitUpgrade libtdb1-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient-develUpgrade libtdb-develUpgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libsamba-passdb0Upgrade libsamba-credentials0-32bitUpgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-policy-python3-develUpgrade ctdbUpgrade libtevent-util0Upgrade libdcerpc-atsvc0Upgrade libsmbldap0Upgrade samba-core-develUpgrade samba-libs-32bitUpgrade libsamba-util0Upgrade libsmbclient0Upgrade libndr-standard0Upgrade libdcerpc0Upgrade libtdb1Upgrade libsmbsharemodes0Upgrade samba-clientUpgrade samba-kdcUpgrade libnetapi-develUpgrade libsamdb0-32bitUpgrade libdcerpc-binding0Upgrade libnetapi0-32bitUpgrade libsamba-errors0Upgrade libtalloc2-32bitUpgrade libsamdb0Upgrade libsamba-util-develUpgrade libgensec0Upgrade libndr-develUpgrade libldb-develUpgrade libsamba-errors0-32bitUpgrade libndr-nbt0Upgrade libsmbclient0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbldap2Upgrade ldapsmbUpgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libsmbconf-develUpgrade samba-client-x86Upgrade samba-libs-python3Upgrade samba-winbindUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy-develUpgrade libndr-krb5pac0Upgrade libwbclient0Upgrade samba-testUpgrade libndr0Upgrade libdcerpc-binding0-32bitUpgrade libtevent-develUpgrade libsmbldap-develUpgrade libdcerpc-develUpgrade libnetapi0Upgrade libtalloc-develUpgrade samba-32bitUpgrade libndr-standard0-32bitUpgrade libsmbconf0-32bitUpgrade libsmbldap0-32bitUpgrade libsamba-util0-32bitUpgrade libtalloc2-x86Upgrade libndr1Upgrade libgensec0-32bitUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac-develUpgrade libndr1-32bitUpgrade samba-develUpgrade libsmbsharemodes-develUpgrade libsamba-passdb-develUpgrade samba-winbind-x86Upgrade libsamba-passdb0-32bitUpgrade samba-cephUpgrade libwbclient0-x86Upgrade libsamba-credentials0Upgrade libtalloc2Upgrade libtevent0Upgrade libldb1Upgrade libtdb1-x86Upgrade samba-python3Upgrade libsmbconf0Upgrade libsamba-policy0-python3Upgrade samba-test-develUpgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade samba-client-32bitUpgrade libsamba-policy0Upgrade samba-libsUpgrade libsmbldap2-32bitUpgrade libndr-standard-develUpgrade libdcerpc-samr0Upgrade libsmbclient0-x86Upgrade libtevent0-x86Upgrade libsmbclient-raw0Upgrade libndr-nbt0-32bitUpgrade libsamba-hostconfig-develUpgrade libtevent0-32bit	Oct 5, 2017	Sep 21, 2017
Ubuntu	—	Upgrade samba	Sep 25, 2017	Sep 21, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence