Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-1139
HistoryAug 22, 2018 - 2:29 p.m.

CVE-2018-1139

2018-08-2214:29:00
CWE-522
[email protected]
web.nvd.nist.gov
277
samba
vulnerability
cve-2018-1139
ntlmv1
authentication
man-in-the-middle attacker

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.9%

JSON

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.

VendorProductVersionCPE
sambasamba*cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
sambasamba*cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Related

redhatcve 1
veracode 1
prion 1
osv 1
ubuntucve 1
nessus 20
openvas 11
samba 1
debiancve 1
alpinelinux 1
ibm 3
amazon 2
redhat 3
oraclelinux 1
centos 1
altlinux 3
ubuntu 1
fedora 5
suse 1
cisa 1
freebsd 1
gentoo 1
redhatcve
redhatcve
CVE-2018-1139
2019-10-16 06:24:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-16 03:25:40
prion
prion
Design/Logic Flaw
2018-08-22 14:29:00
osv
osv
CVE-2018-1139
2018-08-22 14:29:00
ubuntucve
ubuntucve
CVE-2018-1139
2018-08-14 00:00:00
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2019-1618)
2019-05-30 00:00:00
EulerOS 2.0 SP5 : samba (EulerOS-SA-2019-1598)
2019-05-29 00:00:00
Scientific Linux Security Update : samba on SL7.x x86_64 (20181030)
2018-11-27 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1618)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1598)
2020-01-23 00:00:00
Samba Multiple Vulnerabilities (Aug 2018)
2018-08-17 00:00:00
samba
samba
Weak authentication protocol allowed.
2018-08-14 00:00:00
debiancve
debiancve
CVE-2018-1139
2018-08-22 14:29:00
alpinelinux
alpinelinux
CVE-2018-1139
2018-08-22 14:29:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM is vulnerable to Publicly disclosed Samba vulnerabilities (CVE-2018-10858, CVE-2018-1139)
2019-03-05 18:15:01
Security Bulletin: Multiple Samba vulnerabilities affect IBM Spectrum Protect Plus (CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919)
2019-02-26 19:00:01
Security Bulletin: Multiple Vulnerabilities in Samba affect IBM i
2019-12-18 14:26:38
amazon
amazon
Medium: samba
2019-01-22 17:55:00
Medium: samba
2018-12-13 20:13:00
redhat
redhat
(RHSA-2018:3056) Moderate: samba security, bug fix, and enhancement update
2018-10-30 04:13:40
(RHSA-2018:2613) Moderate: samba security, bug fix and enhancement update
2018-09-04 06:19:22
(RHSA-2018:2612) Moderate: samba security, bug fix and enhancement update
2018-09-04 06:19:17
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2018-11-05 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2018-12-14 16:36:48
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.7.9-alt1
2018-08-15 00:00:00
Security fix for the ALT Linux 8 package samba version 4.7.9-alt1
2018-08-15 00:00:00
Security fix for the ALT Linux 10 package samba version 4.8.4-alt1.S1
2018-08-14 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2018-08-14 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: libldb-1.4.0-3.fc28.1.3.5
2018-08-20 18:43:27
[SECURITY] Fedora 28 Update: samba-4.8.4-0.fc28
2018-08-20 18:43:27
[SECURITY] Fedora 27 Update: samba-4.7.9-0.fc27
2018-08-22 00:46:40
suse
suse
Security update for samba (important)
2018-08-17 12:12:13
cisa
cisa
Samba Releases Security Updates
2018-08-14 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2018-08-14 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2020-03-25 00:00:00

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.9%

JSON
Related for CVE-2018-1139
redhatcve1veracode1prion1osv1ubuntucve1nessus20openvas11samba1debiancve1alpinelinux1ibm3amazon2redhat3oraclelinux1centos1altlinux3ubuntu1fedora5suse1cisa1freebsd1gentoo1