vulnerability
FreeBSD: VID-793a0072-7822-11e9-81e2-005056a311d1 (CVE-2019-3880): samba -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:S/C:N/I:P/A:P) | May 14, 2019 | May 18, 2019 | Mar 25, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:P)
Published
May 14, 2019
Added
May 18, 2019
Modified
Mar 25, 2026
Description
The samba project reports: The checksum validation in the S4U2Self handler in the embedded Heimdal KDC did not first confirm that the checksum was keyed, allowing replacement of the requested target (client) principal Authenticated users with write permission can trigger a symlink traversal to write or detect files outside the Samba share.
Solutions
freebsd-upgrade-package-samba46freebsd-upgrade-package-samba47freebsd-upgrade-package-samba48freebsd-upgrade-package-samba49freebsd-upgrade-package-samba410
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.