REDHAT-BUG-1553553
First published: Fri Mar 09 2018(Updated: )
As per samba upstream advisory: On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users passwords, including administrative users.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba | >=4.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1553553#c3
- https://www.samba.org/samba/security/CVE-2018-1057.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1554756
- https://www.samba.org/samba/ftp/patches/security/samba-4.4.16-CVE-2018-1057.patch
- https://www.samba.org/samba/ftp/patches/security/samba-4.3.13-CVE-2018-1057.patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1553553
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-1057
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/samba
- canonical/samba