Vulners
Lucene search
A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC files are created in a private subdirectory of the install location. This directory is typically mode 0700 that is owner (root) only access. However in some upgraded installations it will have other permissions such as 0755 because this was the default before Samba 4.8. Within this directory files are created with mode 0666 which is world-writable including a sample krb5.conf and the list of DNS names and servicePrincipalName values to update.
| Reporter | Title | Published | Views | Family All 44 |
|---|---|---|---|---|
 | Security fix for the ALT Linux 10 package samba version 4.10.2-alt1 | 11 Apr 201900:00 | – | altlinux |
 | Azure Linux 3.0 Security Update: samba (CVE-2019-3870) | 22 Jan 202600:00 | – | nessus |
| Fedora 30 : 2:samba (2019-cacf88eabf) | 2 May 201900:00 | – | nessus |
| Fedora 29 : 2:samba (2019-db21b5f1d2) | 16 Apr 201900:00 | – | nessus |
| Samba 4.9.x < 4.9.6 / 4.10.0 < 4.10.2 World-Writable Files Vulnerability (CVE-2019-3870) | 16 Apr 201900:00 | – | nessus |
| Synology DiskStation Manager Samba Incorrect Default Permissions (CVE-2019-3870) | 1 Oct 202400:00 | – | nessus |
 | The vulnerability of Samba software, related to access control errors, allows a perpetrator to compromise data integrity and cause service failures. | 27 Feb 202000:00 | – | bdu_fstec |
 | CVE-2019-3870 affecting package samba for versions less than 4.18.3-1 | 15 Oct 202419:11 | – | cbl_mariner |
 | Samba Releases Security Updates | 8 Apr 201900:00 | – | cisa |
 | CVE-2019-3870 | 9 Apr 201915:17 | – | cve |
10
Node
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Oct 2024 07:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 23.6
CVSS 3.16.1
CVSS 36.1
EPSS0.0055