CVE-2020-25722

samba is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of access and conformance of data stored allowing total domain compromise...

Samba permission permission and access control issue vulnerability (CNVD-2022-15501)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to a permission permission and access control issue, which stems from a flaw found in the way samba can support RODCs read-only domain controllers as Active Directory domain controllers. An attacker could...

Samba Licensing Issue Vulnerability (CNVD-2022-15499)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to authorization issues, and no details of the vulnerability are currently available...

Samba Resource Management Error Vulnerability

Samba is the standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to a resource management error, and no details of the vulnerability are currently available...

Ubuntu: Security Advisory (USN-5142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba Security Bypass Vulnerability (CNVD-2022-15500)

Samba is the standard Windows interoperability suite for Linux and Unix. A security vulnerability exists in Samba that stems from a flaw discovered in the way Samba, which acts as an Active Directory domain controller, implements Kerberos name-based authentication. An attacker could exploit this...

Samba permission permission and access control issue vulnerability (CNVD-2022-15498)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...

Samba Input Validation Error Vulnerability (CNVD-2021-87030)

Samba is the standard Windows interoperability suite for Linux and Unix. samba is vulnerable to an input validation error, which stems from a flaw found in the way samba implements DCE/RPC. If a client of the Samba server sends a very large DCE/RPC request and chooses to segment it, an attacker...

Samba permission permission and access control issues vulnerability

Samba is a standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to privilege licensing and access control issues, which can be exploited by attackers to cause privilege escalation...

Samba Access Control Error Vulnerability

Samba is a standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to an access control error that could be exploited by an attacker to retrieve plaintext passwords sent over the network...

Ubuntu 20.04 LTS : Samba vulnerabilities (USN-5142-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5142-1 advisory. Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade...

USN-5142-1: Samba vulnerabilities

Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade connections to plaintext authentication. CVE-2016-2124 Andrew Bartlett discovered that Samba incorrectly mapping domain users to local users. An...

openSUSE 15 Security Update : samba and ldb (openSUSE-SU-2021:3647-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3647-1 advisory. - An attacker can downgrade a negotiated SMB1 client connection and its capabitilities. Kerberos authentication is only possible with the...

SUSE SLED12: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / libdcerpc0 / etc (SUSE-SU-2021:3649-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3649-1 advisory. - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717:...

SUSE SLED15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2021:3650-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3650-1 advisory. - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos bsc1014440. - CVE-2020-25717: Fixed privile...

openSUSE: Security Advisory for samba (openSUSE-SU-2021:3647-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Samba 4.0.0 < 4.13.14, 4.14.0 < 4.14.10, 4.15.0 < 4.15.2 Multiple Vulnerabilities

Samba is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Samba Security Vulnerability (CVE-2019-10218)

Malicious servers can cause Samba client code to return filenames containing path separators to calling code. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SUSE: Security Advisory (SUSE-SU-2021:3650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: ctdb / ldb-tools / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2021:3647-1)

"The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3647-1 advisory. - CVE-2020-25718: Fixed that an RODC can issue forge administrator tickets to other servers bsc1192246. - CVE-2021-3738: Fixed crash ...