A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Amazon Linux Ami 2 | — | Upgrade samba-krb5-printingUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-develUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-dcUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-testUpgrade samba-debuginfoUpgrade libwbclient-develUpgrade samba-common-libsUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-python-testUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade libsmbclient | Apr 27, 2020 | Aug 22, 2018 |
| Amazon_linux | — | Upgrade samba | Jan 25, 2019 | Aug 14, 2018 |
| Centos_linux | — | Upgrade samba-winbind-modulesUpgrade libwbclient-develUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade libsmbclientUpgrade libwbclientUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-develUpgrade samba-dcUpgrade sambaUpgrade samba-testUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-commonUpgrade samba-debuginfoUpgrade samba-winbind | Aug 28, 2019 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 22, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba46Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind | May 30, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Oracle_linux | — | Upgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-python-testUpgrade samba-testUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade ctdbUpgrade samba-develUpgrade sambaUpgrade samba-winbind | Nov 6, 2018 | Aug 16, 2018 |
| Redhat_linux | — | Upgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-python-testUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-vfs-glusterfsUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade sambaUpgrade samba-dcUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-commonUpgrade samba-develUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-testUpgrade samba-libsUpgrade samba-pidl | Oct 31, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.8.4 | Aug 15, 2018 | Aug 15, 2018 |
| Suse | — | Upgrade ctdbUpgrade libndr-standard0Upgrade libdcerpc0Upgrade libsmbclient0Upgrade libdcerpc-binding0-32bitUpgrade libndr-nbt0Upgrade libdcerpc-samr-develUpgrade libndr1-32bitUpgrade samba-client-32bitUpgrade libndr-nbt-develUpgrade libndr0Upgrade ctdb-pcp-pmdaUpgrade libsamba-util0-32bitUpgrade samba-kdc-32bitUpgrade libsamdb-develUpgrade libndr-standard-develUpgrade libndr-nbt0-32bitUpgrade libdcerpc0-32bitUpgrade samba-kdcUpgrade libsamba-util0Upgrade libsamba-hostconfig0Upgrade libsamdb0Upgrade libndr-krb5pac0-32bitUpgrade libtevent-util0Upgrade libsamba-errors-develUpgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libsmbldap2Upgrade libsmbconf-develUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr-develUpgrade libtevent-util-develUpgrade libsmbclient0-32bitUpgrade samba-docUpgrade libsamba-errors0Upgrade libndr0-32bitUpgrade libsamba-credentials-develUpgrade libsamba-policy0-32bitUpgrade libsamba-passdb0Upgrade samba-winbind-32bitUpgrade libndr1Upgrade libsamba-credentials0-32bitUpgrade libsamdb0-32bitUpgrade samba-libs-32bitUpgrade ctdb-testsUpgrade libwbclient0Upgrade samba-cephUpgrade libsamba-policy0-python3Upgrade libdcerpc-samr0Upgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libdcerpc-develUpgrade libwbclient0-32bitUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade samba-winbindUpgrade libsamba-passdb-develUpgrade libndr-standard0-32bitUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-pidlUpgrade libsmbldap2-32bitUpgrade libsamba-util-develUpgrade libsamba-policy0Upgrade libsamba-credentials0Upgrade sambaUpgrade samba-dsdb-modulesUpgrade libsamba-passdb0-32bitUpgrade libnetapi0Upgrade samba-pythonUpgrade libsmbconf0-32bitUpgrade libdcerpc-samr0-32bitUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade samba-python3Upgrade libsmbclient-develUpgrade samba-testUpgrade libndr-krb5pac-develUpgrade samba-core-develUpgrade samba-libs-python3Upgrade libsmbconf0 | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub