Summary
Andrew Bartlett discovered that Samba incorrectly handled delegation of
authority when being used as an Active Directory Domain Controller. An
attacker given delegation privileges could use this issue to escalate their
privileges further.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | samba | 2:4.1.6+dfsg-1ubuntu2.14.04.4 |
Vulnerabilities 1
-
Unscored —
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD…
References
-
report
https://ubuntu.com/security/CVE-2014-8143