Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.NEWSTART_CGSL_NS-SA-2021-0167_SAMBA.NASL
HistoryOct 27, 2021 - 12:00 a.m.

NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Multiple Vulnerabilities (NS-SA-2021-0167)

2021-10-2700:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
24

8.5 High

AI Score

Confidence

Low

JSON

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by multiple vulnerabilities:

  • All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with log level = 3 (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange.
    In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless). (CVE-2019-14907)

  • A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker. (CVE-2020-14318)

  • A null pointer dereference flaw was found in samba’s Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service. (CVE-2020-14323)

  • An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka ‘Netlogon Elevation of Privilege Vulnerability’. (CVE-2020-1472)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.

#%NASL_MIN_LEVEL 70300
##
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from ZTE advisory NS-SA-2021-0167. The text
# itself is copyright (C) ZTE, Inc.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(154485);
  script_version("1.10");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/05");

  script_cve_id(
    "CVE-2019-14907",
    "CVE-2020-1472",
    "CVE-2020-14318",
    "CVE-2020-14323"
  );
  script_xref(name:"IAVA", value:"2020-A-0035-S");
  script_xref(name:"IAVA", value:"2020-A-0508-S");
  script_xref(name:"IAVA", value:"2020-A-0438-S");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2020/09/21");
  script_xref(name:"CISA-NCAS", value:"AA22-011A");
  script_xref(name:"CEA-ID", value:"CEA-2020-0129");
  script_xref(name:"CEA-ID", value:"CEA-2020-0101");
  script_xref(name:"CEA-ID", value:"CEA-2021-0025");
  script_xref(name:"CEA-ID", value:"CEA-2021-0008");
  script_xref(name:"CEA-ID", value:"CEA-2020-0121");
  script_xref(name:"CEA-ID", value:"CEA-2023-0016");

  script_name(english:"NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Multiple Vulnerabilities (NS-SA-2021-0167)");

  script_set_attribute(attribute:"synopsis", value:
"The remote NewStart CGSL host is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by
multiple vulnerabilities:

  - All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where
    if it is set with log level = 3 (or above) then the string obtained from the client, after a failed
    character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange.
    In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to
    terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a
    crash there is harmless). (CVE-2019-14907)

  - A flaw was found in the way samba handled file and directory permissions. An authenticated user could use
    this flaw to gain access to certain file and directory information which otherwise would be unavailable to
    the attacker. (CVE-2020-14318)

  - A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before
    4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of
    service. (CVE-2020-14323)

  - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure
    channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon
    Elevation of Privilege Vulnerability'. (CVE-2020-1472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"http://security.gd-linux.com/notice/NS-SA-2021-0167");
  script_set_attribute(attribute:"see_also", value:"http://security.gd-linux.com/info/CVE-2019-14907");
  script_set_attribute(attribute:"see_also", value:"http://security.gd-linux.com/info/CVE-2020-14318");
  script_set_attribute(attribute:"see_also", value:"http://security.gd-linux.com/info/CVE-2020-14323");
  script_set_attribute(attribute:"see_also", value:"http://security.gd-linux.com/info/CVE-2020-1472");
  script_set_attribute(attribute:"solution", value:
"Upgrade the vulnerable CGSL samba packages. Note that updated packages may not be available yet. Please contact ZTE for
more information.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-1472");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploited_by_malware", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2020/01/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/09/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2021/10/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:ctdb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:ctdb-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:libsmbclient");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:libsmbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:libwbclient");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:libwbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-client");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-client-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-common-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-common-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-dc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-dc-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-krb5-printing");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-pidl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-python-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-test-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-vfs-glusterfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-winbind");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-winbind-clients");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-winbind-krb5-locator");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_core:samba-winbind-modules");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:libsmbclient");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:libwbclient");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:libwbclient-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-client");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-client-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-common-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-common-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-dc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-dc-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-krb5-printing");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-pidl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-python");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-python-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-test-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-vfs-glusterfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-winbind");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-winbind-clients");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-winbind-krb5-locator");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:zte:cgsl_main:samba-winbind-modules");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:zte:cgsl_core:5");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:zte:cgsl_main:5");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"NewStart CGSL Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/ZTE-CGSL/release", "Host/ZTE-CGSL/rpm-list", "Host/cpu");

  exit(0);
}

include('audit.inc');
include('global_settings.inc');
include('rpm.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);

var release = get_kb_item('Host/ZTE-CGSL/release');
if (isnull(release) || release !~ "^CGSL (MAIN|CORE)") audit(AUDIT_OS_NOT, 'NewStart Carrier Grade Server Linux');

if (release !~ "CGSL CORE 5.05" &&
    release !~ "CGSL MAIN 5.05")
  audit(AUDIT_OS_NOT, 'NewStart CGSL CORE 5.05 / NewStart CGSL MAIN 5.05');

if (!get_kb_item('Host/ZTE-CGSL/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'NewStart Carrier Grade Server Linux', cpu);

var flag = 0;

var pkgs = {
  'CGSL CORE 5.05': [
    'ctdb-4.10.16-9.el7_9',
    'ctdb-tests-4.10.16-9.el7_9',
    'libsmbclient-4.10.16-9.el7_9',
    'libsmbclient-devel-4.10.16-9.el7_9',
    'libwbclient-4.10.16-9.el7_9',
    'libwbclient-devel-4.10.16-9.el7_9',
    'samba-4.10.16-9.el7_9',
    'samba-client-4.10.16-9.el7_9',
    'samba-client-libs-4.10.16-9.el7_9',
    'samba-common-4.10.16-9.el7_9',
    'samba-common-libs-4.10.16-9.el7_9',
    'samba-common-tools-4.10.16-9.el7_9',
    'samba-dc-4.10.16-9.el7_9',
    'samba-dc-libs-4.10.16-9.el7_9',
    'samba-devel-4.10.16-9.el7_9',
    'samba-krb5-printing-4.10.16-9.el7_9',
    'samba-libs-4.10.16-9.el7_9',
    'samba-pidl-4.10.16-9.el7_9',
    'samba-python-4.10.16-9.el7_9',
    'samba-python-test-4.10.16-9.el7_9',
    'samba-test-4.10.16-9.el7_9',
    'samba-test-libs-4.10.16-9.el7_9',
    'samba-vfs-glusterfs-4.10.16-9.el7_9',
    'samba-winbind-4.10.16-9.el7_9',
    'samba-winbind-clients-4.10.16-9.el7_9',
    'samba-winbind-krb5-locator-4.10.16-9.el7_9',
    'samba-winbind-modules-4.10.16-9.el7_9'
  ],
  'CGSL MAIN 5.05': [
    'libsmbclient-4.10.16-9.el7_9',
    'libwbclient-4.10.16-9.el7_9',
    'libwbclient-devel-4.10.16-9.el7_9',
    'samba-4.10.16-9.el7_9',
    'samba-client-4.10.16-9.el7_9',
    'samba-client-libs-4.10.16-9.el7_9',
    'samba-common-4.10.16-9.el7_9',
    'samba-common-libs-4.10.16-9.el7_9',
    'samba-common-tools-4.10.16-9.el7_9',
    'samba-dc-4.10.16-9.el7_9',
    'samba-dc-libs-4.10.16-9.el7_9',
    'samba-devel-4.10.16-9.el7_9',
    'samba-krb5-printing-4.10.16-9.el7_9',
    'samba-libs-4.10.16-9.el7_9',
    'samba-pidl-4.10.16-9.el7_9',
    'samba-python-4.10.16-9.el7_9',
    'samba-python-test-4.10.16-9.el7_9',
    'samba-test-4.10.16-9.el7_9',
    'samba-test-libs-4.10.16-9.el7_9',
    'samba-vfs-glusterfs-4.10.16-9.el7_9',
    'samba-winbind-4.10.16-9.el7_9',
    'samba-winbind-clients-4.10.16-9.el7_9',
    'samba-winbind-krb5-locator-4.10.16-9.el7_9',
    'samba-winbind-modules-4.10.16-9.el7_9'
  ]
};
var pkg_list = pkgs[release];

foreach (pkg in pkg_list)
  if (rpm_check(release:'ZTE ' + release, reference:pkg)) flag++;

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'samba');
}
VendorProductVersionCPE
ztecgsl_corectdbp-cpe:/a:zte:cgsl_core:ctdb
ztecgsl_corectdb-testsp-cpe:/a:zte:cgsl_core:ctdb-tests
ztecgsl_corelibsmbclientp-cpe:/a:zte:cgsl_core:libsmbclient
ztecgsl_corelibsmbclient-develp-cpe:/a:zte:cgsl_core:libsmbclient-devel
ztecgsl_corelibwbclientp-cpe:/a:zte:cgsl_core:libwbclient
ztecgsl_corelibwbclient-develp-cpe:/a:zte:cgsl_core:libwbclient-devel
ztecgsl_coresambap-cpe:/a:zte:cgsl_core:samba
ztecgsl_coresamba-clientp-cpe:/a:zte:cgsl_core:samba-client
ztecgsl_coresamba-client-libsp-cpe:/a:zte:cgsl_core:samba-client-libs
ztecgsl_coresamba-commonp-cpe:/a:zte:cgsl_core:samba-common
Rows per page:
1-10 of 531

Related

nessus 60
oraclelinux 3
osv 9
openvas 34
amazon 5
f5 2
almalinux 1
centos 2
rocky 1
redhat 4
gentoo 1
ibm 6
freebsd 2
fedora 4
suse 2
altlinux 1
ubuntu 2
mageia 1
redhatcve 3
ubuntucve 3
alpinelinux 3
veracode 3
prion 4
debiancve 4
samba 3
cve 3
cbl_mariner 2
debian 1
cisa 3
attackerkb 1
thn 2
carbonblack 1
threatpost 4
githubexploit 10
msrc 3
huawei 1
archlinux 1
metasploit 1
krebs 1
talosblog 1
rapid7blog 1
nessus
nessus
NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2021-0024)
2021-03-10 00:00:00
CentOS 8 : samba (CESA-2021:1647)
2021-05-19 00:00:00
Oracle Linux 8 : samba (ELSA-2021-1647)
2021-05-26 00:00:00
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2021-05-25 00:00:00
samba security and bug fix update
2020-12-16 00:00:00
samba security, bug fix, and enhancement update
2020-10-06 00:00:00
osv
osv
Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
samba vulnerabilities
2020-11-02 13:56:36
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1050)
2021-01-08 00:00:00
CentOS: Security Advisory for ctdb (CESA-2020:5439)
2020-12-18 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1118)
2021-01-19 00:00:00
amazon
amazon
Critical: samba
2021-06-16 20:36:00
Critical: samba
2021-01-12 22:51:00
Critical: samba
2021-01-05 23:34:00
f5
f5
K93951507 : Multiple Samba vulnerabilities
2021-04-06 00:00:00
K95010211 : Samba vulnerability CVE-2019-14907
2020-03-30 00:00:00
almalinux
almalinux
Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2020-12-18 00:19:11
ctdb, libsmbclient, libwbclient, samba security update
2020-10-20 18:56:03
rocky
rocky
samba security, bug fix, and enhancement update
2021-05-18 05:44:25
redhat
redhat
(RHSA-2020:5439) Moderate: samba security and bug fix update
2020-12-15 09:01:31
(RHSA-2021:1647) Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
(RHSA-2021:3723) Moderate: samba security, bug fix and enhancement update
2021-10-05 04:55:51
gentoo
gentoo
Samba: Multiple vulnerabilities
2020-12-24 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in samba affect IBM Spectrum Scale SMB protocol access method.
2021-01-25 05:03:53
Security Bulletin: Samba for IBM i is affected by CVE-2020-14323 and CVE-2020-14318
2020-11-11 20:50:06
Security Bulletin: Multiple vulnerabilities found in Spectrum Scale affect IBM Cloud Pak System
2021-05-19 17:27:44
freebsd
freebsd
samba -- Multiple Vulnerabilities
2020-10-29 00:00:00
samba -- Unauthenticated domain takeover via netlogon
2020-01-01 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: samba-4.13.1-0.fc33
2020-11-03 01:01:17
[SECURITY] Fedora 32 Update: samba-4.12.10-0.fc32
2020-11-10 01:29:57
[SECURITY] Fedora 33 Update: samba-4.13.0-11.fc33
2020-09-25 17:25:08
suse
suse
Security update for samba (important)
2020-11-02 00:00:00
Security update for samba (important)
2020-11-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.12.9-alt1
2020-10-29 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2020-11-02 00:00:00
Samba vulnerabilities
2021-05-03 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2020-11-10 18:20:00
redhatcve
redhatcve
CVE-2019-14907
2020-01-21 10:09:13
CVE-2020-14323
2020-10-29 11:29:25
CVE-2020-14318
2020-10-29 11:29:24
ubuntucve
ubuntucve
CVE-2019-14907
2020-01-21 00:00:00
CVE-2020-14323
2020-10-29 00:00:00
CVE-2020-14318
2020-10-29 00:00:00
alpinelinux
alpinelinux
CVE-2020-14323
2020-10-29 20:15:17
CVE-2019-14907
2020-01-21 18:15:00
CVE-2020-14318
2020-12-03 16:15:12
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:39:04
Information Disclosure
2020-11-09 05:13:20
Denial Of Service (DoS)
2020-11-09 05:13:27
prion
prion
Design/Logic Flaw
2020-01-21 18:15:00
Null pointer dereference
2020-10-29 20:15:00
Design/Logic Flaw
2020-12-03 16:15:00
debiancve
debiancve
CVE-2019-14907
2020-01-21 18:15:00
CVE-2020-14323
2020-10-29 20:15:17
CVE-2020-14318
2020-12-03 16:15:12
samba
samba
Crash after failed character conversion at
2020-01-21 00:00:00
Unprivileged user can crash winbind
2020-10-29 00:00:00
Missing handle permissions check in SMB1/2/3
2020-10-29 00:00:00
cve
cve
CVE-2019-14907
2020-01-21 18:15:00
CVE-2020-14323
2020-10-29 20:15:17
CVE-2020-14318
2020-12-03 16:15:12
cbl_mariner
cbl_mariner
CVE-2020-14323 affecting package samba 4.12.5-6
2024-04-23 09:06:27
CVE-2020-14318 affecting package samba 4.12.5-6
2024-04-23 09:06:27
debian
debian
[SECURITY] [DLA 2463-1] samba security update
2020-11-23 03:18:54
cisa
cisa
CERT/CC Releases Information on Critical Vulnerability in Microsoft Windows Netlogon Remote Protocol
2020-09-17 00:00:00
Microsoft Warns of Continued Exploitation of CVE-2020-1472
2020-10-29 00:00:00
Samba Releases Security Update for CVE-2020-1472
2020-09-21 00:00:00
attackerkb
attackerkb
CVE-2020-1472
2020-08-17 00:00:00
thn
thn
Detecting and Preventing Critical ZeroLogon Windows Server Vulnerability
2020-09-23 18:08:00
LIVE Webinar on Zerologon Vulnerability: Technical Analysis and Detection
2020-09-29 17:26:00
carbonblack
carbonblack
TAU Threat Advisory: Imminent Ransomware threat to U.S. Healthcare and Public Health Sector
2020-10-30 20:13:43
threatpost
threatpost
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
2020-11-19 14:34:36
Cloud Attacks Are Bypassing MFA, Feds Warn
2021-01-14 16:45:04
Ring Adds End-to-End Encryption to Quell Security Uproar
2021-01-14 13:28:22
githubexploit
githubexploit
Exploit for Use of Insufficiently Random Values in Microsoft
2020-09-29 18:45:44
Exploit for Use of Insufficiently Random Values in Microsoft
2021-04-22 18:51:09
Exploit for Use of Insufficiently Random Values in Microsoft
2020-09-16 03:57:04
msrc
msrc
Attacks exploiting Netlogon vulnerability (CVE-2020-1472)
2020-10-29 07:00:00
Attacks exploiting Netlogon vulnerability (CVE-2020-1472)
2020-10-29 20:02:19
Netlogon Domain Controller Enforcement Mode is enabled by default beginning with the February 9, 2021 Security Update, related to CVE-2020-1472
2021-01-14 08:00:00
huawei
huawei
Security Advisory - Netlogon Elevation of Privilege Vulnerability
2020-11-05 00:00:00
archlinux
archlinux
[ASA-202009-17] samba: access restriction bypass
2020-09-29 00:00:00
metasploit
metasploit
Netlogon Weak Cryptographic Authentication
2020-09-17 18:28:53
krebs
krebs
Microsoft: Attackers Exploiting ‘ZeroLogon’ Windows Flaw
2020-09-24 17:00:51
talosblog
talosblog
Microsoft Netlogon exploitation continues to rise
2020-09-29 09:04:58
rapid7blog
rapid7blog
CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know
2020-09-14 23:29:59

8.5 High

AI Score

Confidence

Low

JSON
Related for NEWSTART_CGSL_NS-SA-2021-0167_SAMBA.NASL
nessus60oraclelinux3osv9openvas34amazon5f52almalinux1centos2rocky1redhat4gentoo1ibm6freebsd2fedora4suse2altlinux1ubuntu2mageia1redhatcve3ubuntucve3alpinelinux3veracode3prion4debiancve4samba3cve3cbl_mariner2debian1cisa3attackerkb1thn2carbonblack1threatpost4githubexploit10msrc3huawei1archlinux1metasploit1krebs1talosblog1rapid7blog1