The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sambaUpgrade samba-commonUpgrade samba-clientUpgrade samba-swat | Dec 1, 2016 | Jun 24, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Jun 24, 2009 |
| Samba | — | Upgrade to Samba version 3.0.35Upgrade to Samba version 3.3.6Upgrade to Samba version 3.2.13 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade libmsrpcUpgrade libnetapi0Upgrade samba-client-64bitUpgrade libwbclient0Upgrade samba-64bitUpgrade libsmbclient0-64bitUpgrade samba-32bitUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-winbind-64bitUpgrade samba-pythonUpgrade libsmbclient0Upgrade libnetapi-develUpgrade libtdb-develUpgrade libsmbclient0-32bitUpgrade libtdb1-32bitUpgrade sambaUpgrade libwbclient0-64bitUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade samba-winbindUpgrade libtalloc-develUpgrade libsmbsharemodes0Upgrade samba-vscanUpgrade libtdb1-64bitUpgrade libtalloc1Upgrade libsmbsharemodes-develUpgrade samba-krb-printingUpgrade samba-client-32bitUpgrade ldapsmbUpgrade libtdb1Upgrade libtalloc1-64bitUpgrade libsmbsharemodesUpgrade libtalloc1-32bitUpgrade libwbclient0-32bitUpgrade libmsrpc-develUpgrade cifs-mountUpgrade samba-client | Feb 17, 2015 | Jun 24, 2009 |
| Ubuntu | — | Upgrade smbfsUpgrade sambaUpgrade smbclient | Nov 8, 2024 | Jun 25, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Jun 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub