The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade sambaUpgrade samba-swat | Dec 1, 2016 | Jun 24, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Jun 25, 2009 |
| Oracle_linux | — | Upgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | Jun 24, 2009 |
| Samba | — | Upgrade to Samba version 3.0.35Upgrade to Samba version 3.2.13Upgrade to Samba version 3.3.6 | Nov 13, 2013 | Jun 24, 2009 |
| Suse | — | Upgrade libtevent-develUpgrade samba-client-libsUpgrade libtdb1-x86Upgrade pam_cifscredsUpgrade samba-gpupdateUpgrade samba-client-32bitUpgrade libtevent0-x86Upgrade samba-core-develUpgrade libnetapi0-32bitUpgrade libsamba-errors-develUpgrade libndr-krb5pac-develUpgrade libldb1Upgrade libsamdb-develUpgrade ldapsmbUpgrade samba-clientUpgrade libdcerpc-atsvc-develUpgrade libgensec-develUpgrade samba-test-develUpgrade libsmbconf-develUpgrade libtevent0-32bitUpgrade samba-dsdb-modulesUpgrade libdcerpc-atsvc0Upgrade samba-toolUpgrade libtalloc1-x86Upgrade libndr-krb5pac0Upgrade samba-libs-python3-32bitUpgrade libndr-standard-develUpgrade libsmbclient0-x86Upgrade cifs-utils-develUpgrade samba-krb-printingUpgrade libsmbsharemodes-develUpgrade libndr-develUpgrade libdcerpc-samr0Upgrade libregistry0Upgrade libgensec0-32bitUpgrade samba-client-langUpgrade python3-ldbUpgrade samba-ldb-ldapUpgrade libndr-standard0Upgrade libwbclient0-32bitUpgrade samba-testUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0Upgrade libregistry-develUpgrade samba-python3Upgrade libtalloc2-32bitUpgrade libsamba-policy0Upgrade libsamdb0-32bitUpgrade cifs-mountUpgrade libsamba-credentials0Upgrade libtdb1Upgrade libndr0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libdcerpc-samr-develUpgrade samba-winbind-libs-langUpgrade libsmbclient-raw-develUpgrade ldb-toolsUpgrade samba-winbind-x86Upgrade libsmbldap0Upgrade libsmbclient-raw0-32bitUpgrade samba-ad-dcUpgrade libsamba-passdb-develUpgrade libndr-nbt0-32bitUpgrade libtalloc1Upgrade libtalloc1-32bitUpgrade libsamba-util0Upgrade libtdb-develUpgrade libndr0Upgrade libsamba-errors0Upgrade ctdb-pcp-pmdaUpgrade libsmbclient0-32bitUpgrade libpdb0Upgrade libldb-develUpgrade libsamba-util0-32bitUpgrade libsmbldap2-32bitUpgrade samba-pythonUpgrade cifs-utilsUpgrade libsmbconf0-32bitUpgrade libtalloc2Upgrade libndr-nbt0Upgrade libsamba-util-develUpgrade libndr-standard0-32bitUpgrade libsmbldap2Upgrade samba-winbindUpgrade samba-libsUpgrade wb-cifs-idmap-pluginUpgrade libsmbldap0-32bitUpgrade libtalloc2-x86Upgrade libpdb0-32bitUpgrade libsamdb0Upgrade libgensec0Upgrade samba-kdcUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient-develUpgrade samba-winbind-32bitUpgrade libldb2Upgrade samba-develUpgrade libndr-nbt-develUpgrade samba-dcerpcUpgrade libnetapi0Upgrade libsamba-hostconfig0Upgrade samba-docUpgrade libsmbclient-raw0Upgrade libtevent-util0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libpdb-develUpgrade libsmbldap-develUpgrade libsmbsharemodes0Upgrade samba-winbind-libsUpgrade samba-32bitUpgrade libtevent-util-develUpgrade libsmbclient-develUpgrade libsamba-credentials0-32bitUpgrade libtevent0Upgrade libsamba-passdb0-32bitUpgrade libnetapi-develUpgrade samba-x86Upgrade libdcerpc-binding0Upgrade libtdb1-32bitUpgrade libdcerpc0-32bitUpgrade libtevent-util0Upgrade libwbclient0-x86Upgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade sambaUpgrade libsmbconf0Upgrade ctdbUpgrade libsamba-credentials-develUpgrade libsamba-errors0-32bitUpgrade libwbclient0Upgrade samba-client-x86Upgrade libtalloc-develUpgrade samba-ad-dc-libsUpgrade libdcerpc-develUpgrade libsmbclient0Upgrade samba-libs-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade smbfsUpgrade smbclient | Nov 8, 2024 | Jun 25, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Jun 25, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub