78 results · Feed
-
High 8.1
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
-
Unscored —
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
-
Unscored —
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged…
-
Unscored —
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not al…
-
Unscored —
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kp…
-
Medium 4.3
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enou…
-
Unscored —
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify …
-
Unscored —
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values fr…
-
Unscored —
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account an…
-
Unscored —
MaxQueryDuration not honoured in Samba AD DC LDAP
-
Unscored —
A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with perm…
-
Unscored —
In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanis…
-
Unscored —
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request,…
-
High 8.8
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple S…
-
Unscored —
All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a fil…
-
Unscored —
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only doma…
-
Unscored —
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentica…
-
Unscored —
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacke…
-
Unscored —
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…
-
Unscored —
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plai…
-
Unscored —
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a direct…
-
Unscored —
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Grantin…
-
Unscored —
A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause i…
-
Unscored —
A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bou…
-
Unscored —
A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gid…
-
Medium 4.3
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to …
-
Unscored —
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC …
-
Medium 6.6CVE-2020-17049 EPSS 14%
Kerberos KDC Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured…
-
Medium 5.5
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and befo…
-
Medium 5.5
Netlogon Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could ru…
KEV Nov 3, 2021 -
Medium 6.1
A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creatio…
-
Medium 6.4
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos a…
-
High 7.4CVE-2017-12150 EPSS 13%
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when c…
-
Unscored —
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is c…
-
Unscored —CVE-2018-1057 EPSS 10%
On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to mod…
-
Unscored —CVE-2017-15275 EPSS 21%
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to …
-
Critical 9.8
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…
KEV Mar 30, 2023 -
Unscored —
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…