Description
The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in Samba 3.4.x before 3.4.17, 3.5.x before 3.5.15, and 3.6.x before 3.6.5 do not properly restrict modifications to the privileges database, which allows remote authenticated users to obtain the "take ownership" privilege via an LSA connection.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:3.6.5-1 | — |
| Debian 13 | samba | 2:3.6.5-1 | — |
| Debian 12 | samba | 2:3.6.5-1 | — |
| Debian 6.0 | samba | 2:3.5.6~dfsg-3squeeze8 | DSA-2463-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | samba +11 | 3.5.10-116.el6_2 | RHSA-2012:0533 |
| RHEL 5 | samba3x +7 | 3.5.10-0.109.el5_8 | RHSA-2012:0533 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.5.0-1.1 | openSUSE-SU-2024:10069-1 |
Advisories 3
- RHSA-2012:0533 Red Hat Security Advisory: samba and samba3x security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-2463-1 samba - missing permission checks Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10069-1 ctdb-4.5.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- USN-1434-1 vendor-advisory
- 81648 vdb-entry
- SUSE-SU-2012:0591 vendor-advisory
- MDVSA-2012:067 vendor-advisory
- 48996 third-party-advisory
- FEDORA-2012-6981 vendor-advisory
- 49017 third-party-advisory
- 1026988 vdb-entry
- HPSBUX02789 vendor-advisory
- http://www.samba.org/samba/security/CVE-2012-2111
- 48976 third-party-advisory
- openSUSE-SU-2012:0583 vendor-advisory
- FEDORA-2012-6999 vendor-advisory
- 49030 third-party-advisory
- FEDORA-2012-7006 vendor-advisory
- http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578
- 48984 third-party-advisory
- 48999 third-party-advisory
- SUSE-SU-2012:0573 vendor-advisory
- DSA-2463 vendor-advisory
- RHSA-2012:0533 vendor-advisory