CVE-2006-1059
First published: Thu Mar 30 2006(Updated: )
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba | =3.0.21 | |
| Samba | =3.0.21a | |
| Samba | =3.0.21b | |
| Samba | =3.0.21c |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://us1.samba.org/samba/security/CAN-2006-1059.html
- http://secunia.com/advisories/19455
- http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html
- http://www.securityfocus.com/bid/17314
- http://www.osvdb.org/24263
- http://securitytracker.com/id?1015850
- http://secunia.com/advisories/19468
- http://www.trustix.org/errata/2006/0018
- http://secunia.com/advisories/19539
- http://www.vupen.com/english/advisories/2006/1179
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25575
- http://www.securityfocus.com/archive/1/429370/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-1059?
CVE-2006-1059 is classified as a moderate severity vulnerability due to potential local exploitation.
How do I fix CVE-2006-1059?
To fix CVE-2006-1059, you should upgrade to a newer version of Samba that does not log the machine trust account password in cleartext.
Which versions of Samba are affected by CVE-2006-1059?
CVE-2006-1059 affects Samba versions 3.0.21 to 3.0.21c.
What type of attack does CVE-2006-1059 allow?
CVE-2006-1059 allows local users to obtain the machine trust account password and potentially spoof the server.
How can I determine if my system is vulnerable to CVE-2006-1059?
You can check your Samba version and examine the log files for cleartext password entries to determine if your system is vulnerable to CVE-2006-1059.
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/samba
- canonical/samba
- version/samba/3.0.21
- version/samba/3.0.21a
- version/samba/3.0.21b
- version/samba/3.0.21c