CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

DEBIAN-CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

ALPINE-CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

Privilege escalation

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

CVE-2016-2126

CVE-2016-2126 affects Samba 4.0.0 through 4.5.2, caused by incorrect handling of the PAC checksum in winbindd. A remote, authenticated user could trigger a crash of the winbindd process via a legitimate Kerberos ticket, and a local service with access to the winbindd privileged pipe could cause w...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...

SUSE SLES11 Security Update : samba (SUSE-SU-2017:1216-1)

This update for samba fixes the following issues: Security issue fixed : - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147. For SUSE Linux Enterprise 11 SP4 this is a re-issue of the update, a regression in the fix has been addressed bsc1036283, bso12721. Note...

SUSE-SU-2017:1216-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2017-2619: symlink race permits opening files outside share directory bsc1027147. For SUSE Linux Enterprise 11 SP4 this is a re-issue of the update, a regression in the fix has been addressed bsc1036283, bso12721...

SUSE-RU-2017:1218-1 Recommended update for samba

This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with 'follow symlinks = no'; bsc1036283, bso12721...

SUSE-RU-2017:1217-1 Recommended update for samba

This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with 'follow symlinks = no'; bsc1036283, bso12721...

SUSE-RU-2017:1219-1 Recommended update for samba

This update for samba fixes the following issues: - Fix CVE-2017-2619 regression with 'follow symlinks = no'; bsc1036283, bso12721...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2016-1031)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2016-1014)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in Samba's DCE/RPC protocol implementation. A remote, authenticated attacker could use these flaws to cause a denial of...

EulerOS 2.0 SP1 : samba (EulerOS-SA-2016-1006)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or...

Ubuntu: Security Advisory (USN-3267-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 17.04 : samba vulnerability (USN-3267-1)

Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

USN-3267-1: Samba vulnerability

Jann Horn discovered that Samba incorrectly handled symlinks. An authenticated remote attacker could use this issue to access files on the server outside of the exported directories...

Fedora 24 : 2:samba (2017-97fb93e1d1)

Fix a nsswins crash ---- Security fix for CVE-2017-2619 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...