samba-client project samba-client vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

The samba-client package prior to 4.0.0 for Node.js allows command injection because of the use of process.exec.

Samba-client Project Samba-client

8.8

CVSSv3

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the...

Samba Samba

6.5

CVSSv3

It was found that Samba prior to 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

Samba Samba Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Server Tus 7.3 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.4 Redhat Gluster Storage 3.0 Redhat Enterprise Linux Server Eus 7.5 Redhat Enterprise Linux Server Tus 7.6 Redhat Enterprise Linux Server Eus 7.6 Redhat Enterprise Linux Server Aus 7.6

6.5

CVSSv3

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with...

Samba Samba

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook