CVE-2012-6150

2013-12-0300:00:00

ubuntu.com

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

47.6%

JSON

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c
in Samba through 4.1.2 handles invalid require_membership_of group names by
accepting authentication by any user, which allows remote authenticated
users to bypass intended access restrictions in opportunistic circumstances
by leveraging an administrator’s pam_winbind configuration-file mistake.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchsamba< 2:3.4.7~dfsg-1ubuntu3.13UNKNOWN
ubuntu12.04noarchsamba< 2:3.6.3-2ubuntu2.9UNKNOWN
ubuntu12.10noarchsamba< 2:3.6.6-3ubuntu5.3UNKNOWN
ubuntu13.04noarchsamba< 2:3.6.9-1ubuntu1.2UNKNOWN
ubuntu13.10noarchsamba< 2:3.6.18-1ubuntu3.1UNKNOWN
ubuntu14.04noarchsamba< 2:4.0.13+dfsg-1ubuntu1UNKNOWN
ubuntu14.10noarchsamba< 2:4.0.13+dfsg-1ubuntu1UNKNOWN
ubuntu15.04noarchsamba< 2:4.0.13+dfsg-1ubuntu1UNKNOWN
ubuntu15.10noarchsamba< 2:4.0.13+dfsg-1ubuntu1UNKNOWN
ubuntu16.04noarchsamba< 2:4.0.13+dfsg-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	samba	< 2:3.4.7~dfsg-1ubuntu3.13	UNKNOWN
ubuntu	12.04	noarch	samba	< 2:3.6.3-2ubuntu2.9	UNKNOWN
ubuntu	12.10	noarch	samba	< 2:3.6.6-3ubuntu5.3	UNKNOWN
ubuntu	13.04	noarch	samba	< 2:3.6.9-1ubuntu1.2	UNKNOWN
ubuntu	13.10	noarch	samba	< 2:3.6.18-1ubuntu3.1	UNKNOWN
ubuntu	14.04	noarch	samba	< 2:4.0.13+dfsg-1ubuntu1	UNKNOWN
ubuntu	14.10	noarch	samba	< 2:4.0.13+dfsg-1ubuntu1	UNKNOWN
ubuntu	15.04	noarch	samba	< 2:4.0.13+dfsg-1ubuntu1	UNKNOWN
ubuntu	15.10	noarch	samba	< 2:4.0.13+dfsg-1ubuntu1	UNKNOWN
ubuntu	16.04	noarch	samba	< 2:4.0.13+dfsg-1ubuntu1	UNKNOWN