Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2012-6150
HistoryDec 03, 2013 - 7:55 p.m.

Design/Logic Flaw

2013-12-0319:55:00
PRIOn knowledge base
www.prio-n.com
1

6.4 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

47.1%

JSON

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator’s pam_winbind configuration-file mistake.

References

Related

debiancve 1
cve 1
ubuntucve 1
samba 1
veracode 3
openvas 34
altlinux 3
nessus 24
freebsd 1
fedora 9
oraclelinux 3
mageia 1
centos 2
redhat 2
suse 3
ubuntu 1
gentoo 1
debiancve
debiancve
CVE-2012-6150
2013-12-03 19:55:00
cve
cve
CVE-2012-6150
2013-12-03 19:55:00
ubuntucve
ubuntucve
CVE-2012-6150
2013-12-03 00:00:00
samba
samba
pam_winbind login without require_membership_of restrictions
2013-12-09 00:00:00
veracode
veracode
Bypass Access Restriction
2019-01-15 08:59:04
Privilege Escalation
2019-05-02 04:57:33
Improper Handling Of Credentials
2019-05-02 04:57:33
openvas
openvas
Samba 3.3.10, 3.4.3, 3.5.0 and later Improper Input Validation Vulnerability (CVE-2012-6150)
2021-09-24 00:00:00
Fedora Update for samba FEDORA-2013-23177
2014-02-03 00:00:00
Fedora Update for samba FEDORA-2013-23177
2014-02-03 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.1.3-alt1
2013-12-09 00:00:00
Security fix for the ALT Linux 10 package samba version 4.1.3-alt1
2013-12-09 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.1.3-alt1
2013-12-09 00:00:00
nessus
nessus
Oracle Linux 5 / 6 : samba / samba3x (ELSA-2014-0330)
2014-03-26 00:00:00
Samba 3.x < 3.6.22 / 4.0.x < 4.0.13 / 4.1.x < 4.1.3 Multiple Vulnerabilities
2013-12-12 00:00:00
RHEL 5 / 6 : samba and samba3x (RHSA-2014:0330)
2014-03-26 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2012-06-12 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: samba-4.1.3-2.fc20
2013-12-24 03:39:37
[SECURITY] Fedora 19 Update: samba-4.0.13-1.fc19
2013-12-15 03:35:27
[SECURITY] Fedora 20 Update: samba-4.1.6-1.fc20
2014-03-15 15:15:35
oraclelinux
oraclelinux
samba and samba3x security update
2014-03-25 00:00:00
samba4 security update
2014-04-09 00:00:00
samba security and bug fix update
2018-06-25 00:00:00
mageia
mageia
Updated samba package fixes multiple vulnerabilities
2013-12-13 02:22:59
centos
centos
libsmbclient, samba, samba3x security update
2014-03-25 15:09:56
samba4 security update
2014-04-09 19:17:37
redhat
redhat
(RHSA-2014:0330) Moderate: samba and samba3x security update
2014-03-25 00:00:00
(RHSA-2014:0383) Moderate: samba4 security update
2014-04-09 00:00:00
suse
suse
Security update for Samba (important)
2014-01-07 00:04:36
Security update for samba (important)
2016-04-20 12:11:11
Security update for samba (important)
2016-04-20 12:07:48
ubuntu
ubuntu
Samba vulnerabilities
2013-12-11 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00

6.4 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

47.1%

JSON
Related for PRION:CVE-2012-6150
debiancve1cve1ubuntucve1samba1veracode3openvas34altlinux3nessus24freebsd1fedora9oraclelinux3mageia1centos2redhat2suse3ubuntu1gentoo1