Логотип exploitDog
bind:CVE-2019-3870
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-3870

Количество 7

Количество 7

ubuntu логотип

CVE-2019-3870

почти 7 лет назад

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
EPSS: Низкий
redhat логотип

CVE-2019-3870

почти 7 лет назад

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2019-3870

почти 7 лет назад

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
EPSS: Низкий
msrc логотип

CVE-2019-3870

больше 1 года назад

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2019-3870

почти 7 лет назад

A vulnerability was found in Samba from version (including) 4.9 to ver ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-xv9q-3jh5-9rrc

больше 3 лет назад

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
EPSS: Низкий
fstec логотип

BDU:2020-00725

почти 7 лет назад

Уязвимость программного обеспечения Samba, связанная с ошибками разграничения доступа, позволяющая нарушителю нарушить целостность данных и вызвать отказ в обслуживании

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-3870

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
0%
Низкий
почти 7 лет назад
redhat логотип
CVE-2019-3870

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
0%
Низкий
почти 7 лет назад
nvd логотип
CVE-2019-3870

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
0%
Низкий
почти 7 лет назад
msrc логотип
CVSS3: 6.1
0%
Низкий
больше 1 года назад
debian логотип
CVE-2019-3870

A vulnerability was found in Samba from version (including) 4.9 to ver ...

CVSS3: 6.1
0%
Низкий
почти 7 лет назад
github логотип
GHSA-xv9q-3jh5-9rrc

A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.

CVSS3: 6.1
0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2020-00725

Уязвимость программного обеспечения Samba, связанная с ошибками разграничения доступа, позволяющая нарушителю нарушить целостность данных и вызвать отказ в обслуживании

CVSS3: 6.1
0%
Низкий
почти 7 лет назад

Уязвимостей на страницу