CVE-2014-8143

2015-01-1600:00:00

ubuntu.com

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

75.2%

JSON

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4,
when an Active Directory Domain Controller (AD DC) is configured, allows
remote authenticated users to set the LDB userAccountControl
UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by
leveraging delegation of authority for user-account or computer-account
creation.

Bugs

<https://bugzilla.samba.org/show_bug.cgi?id=10993 (private)>

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchsamba< 2:4.1.6+dfsg-1ubuntu2.14.04.4UNKNOWN
ubuntu14.10noarchsamba< 2:4.1.11+dfsg-1ubuntu2.1UNKNOWN
ubuntu15.04noarchsamba< 2:4.1.11+dfsg-1ubuntu4UNKNOWN
ubuntu15.10noarchsamba< 2:4.1.11+dfsg-1ubuntu4UNKNOWN
ubuntu16.04noarchsamba< 2:4.1.11+dfsg-1ubuntu4UNKNOWN
ubuntu16.10noarchsamba< 2:4.1.11+dfsg-1ubuntu4UNKNOWN
ubuntu17.04noarchsamba< 2:4.1.11+dfsg-1ubuntu4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	samba	< 2:4.1.6+dfsg-1ubuntu2.14.04.4	UNKNOWN
ubuntu	14.10	noarch	samba	< 2:4.1.11+dfsg-1ubuntu2.1	UNKNOWN
ubuntu	15.04	noarch	samba	< 2:4.1.11+dfsg-1ubuntu4	UNKNOWN
ubuntu	15.10	noarch	samba	< 2:4.1.11+dfsg-1ubuntu4	UNKNOWN
ubuntu	16.04	noarch	samba	< 2:4.1.11+dfsg-1ubuntu4	UNKNOWN
ubuntu	16.10	noarch	samba	< 2:4.1.11+dfsg-1ubuntu4	UNKNOWN
ubuntu	17.04	noarch	samba	< 2:4.1.11+dfsg-1ubuntu4	UNKNOWN