ZDI-23-1228: Samba Spotlight mdssvc RPC Request Type Confusion Information Disclosure Vulnerability
Published Aug 25, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samba. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Samba Samba
Event History
Aug 25, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-1228?
ZDI-23-1228 has been assessed as a high severity vulnerability due to its potential for sensitive information disclosure.
2
How do I fix ZDI-23-1228?
To mitigate ZDI-23-1228, update Samba to the latest patched version provided by the vendor.
3
What type of attacks can exploit ZDI-23-1228?
ZDI-23-1228 can be exploited by remote attackers to disclose sensitive information without requiring authentication.
4
Which versions of Samba are affected by ZDI-23-1228?
ZDI-23-1228 affects all installations of Samba that have not applied relevant security updates.
5
What information can be disclosed due to ZDI-23-1228?
The exploitation of ZDI-23-1228 may allow attackers to view sensitive data configured within the affected Samba installations.