A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 9, 2019 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.9.6-11.4.11.0.1.1.0 on Solaris 11.4 | Jul 17, 2019 | Apr 9, 2019 |
| Samba | — | Upgrade to Samba version 4.9.6Upgrade to Samba version 4.10.2 | Apr 30, 2019 | Apr 9, 2019 |
| Suse | — | Upgrade libsamba-hostconfig0-32bitUpgrade libsmbclient0-32bitUpgrade libsamba-errors0-32bitUpgrade libndr0Upgrade libtevent-util-develUpgrade ctdbUpgrade libtevent-util0Upgrade libnetapi0Upgrade libdcerpc-develUpgrade libndr-nbt0Upgrade samba-libs-python3Upgrade sambaUpgrade libsamba-credentials-develUpgrade libsmbclient-develUpgrade libwbclient0Upgrade samba-core-develUpgrade libsamba-policy0-python3Upgrade samba-libsUpgrade samba-cephUpgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade libsamba-errors0Upgrade libdcerpc0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig0Upgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade samba-docUpgrade libndr-standard0-32bitUpgrade libsamba-util0Upgrade libsamba-util-develUpgrade libsmbldap2Upgrade libsamba-util0-32bitUpgrade libwbclient-develUpgrade libsmbldap2-32bitUpgrade samba-winbindUpgrade libtevent-util0-32bitUpgrade libsmbconf0-32bitUpgrade samba-winbind-32bitUpgrade libsamdb0Upgrade libsmbconf0Upgrade libsamba-policy-develUpgrade libndr1Upgrade libnetapi-develUpgrade libndr-nbt-develUpgrade libdcerpc-samr-develUpgrade libndr-krb5pac0Upgrade samba-client-32bitUpgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade samba-clientUpgrade libndr1-32bitUpgrade libdcerpc-samr0Upgrade libsamba-credentials0Upgrade libndr-standard0Upgrade libwbclient0-32bitUpgrade samba-python3Upgrade libdcerpc0Upgrade libsamba-errors-develUpgrade libnetapi0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-standard-develUpgrade libndr-develUpgrade libsamba-policy-python3-develUpgrade libndr0-32bitUpgrade libsmbconf-develUpgrade libsamdb0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-credentials0-32bitUpgrade libsamdb-develUpgrade libndr-krb5pac-develUpgrade samba-libs-python3-32bitUpgrade libsamba-hostconfig-develUpgrade libsmbclient0Upgrade libsamba-passdb0 | Dec 19, 2019 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub