ZDI-CAN-20228: ZDI-23-1228: Samba Spotlight mdssvc RPC Request Type Confusion Information Disclosure Vulnerability
Published Aug 25, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samba. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Samba Samba
Event History
Aug 25, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20228?
The severity of ZDI-CAN-20228 is considered critical due to the potential for remote attackers to disclose sensitive information without authentication.
2
How do I fix ZDI-CAN-20228?
To fix ZDI-CAN-20228, update your Samba installation to the latest version that addresses this vulnerability.
3
What type of vulnerability is ZDI-CAN-20228?
ZDI-CAN-20228 is an information disclosure vulnerability that allows attackers to access sensitive data.
4
Which versions of Samba are affected by ZDI-CAN-20228?
ZDI-CAN-20228 affects all recent versions of Samba installations that have not been patched.
5
Can ZDI-CAN-20228 be exploited without authentication?
Yes, ZDI-CAN-20228 can be exploited without any authentication, making it particularly dangerous.