Поиск уязвимостей
Количество 25
Количество 25
GHSA-qc7g-mqp8-fhmm
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
GHSA-j88p-975v-5qqh
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
BDU:2021-01425
Уязвимость реализации протокола Kerberos пакета программ сетевого взаимодействия Samba, связанная с недостатком механизма контроля привилегий и средств управления доступом, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2018-2489
ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1
ALT-PU-2018-2488
ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-qc7g-mqp8-fhmm It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. | CVSS3: 6.5 | 9% Низкий | больше 4 лет назад |
| GHSA-j88p-975v-5qqh Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. | CVSS3: 6.5 | 7% Низкий | больше 4 лет назад |
 | BDU:2021-01425 Уязвимость реализации протокола Kerberos пакета программ сетевого взаимодействия Samba, связанная с недостатком механизма контроля привилегий и средств управления доступом, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 7% Низкий | больше 9 лет назад |
| ALT-PU-2018-2489 ALT-PU-2018-2489: package `samba-DC` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад | |
| ALT-PU-2018-2488 ALT-PU-2018-2488: package `samba` update to version 4.8.6-alt1 | CVSS3: 9.8 | около 8 лет назад |
Уязвимостей на страницу