Non notée
CVE-2022-0336 The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not…
Description
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| samba | Versions non publiées |
Références
- www.samba.org www.samba.org
- bugzilla.samba.org bugzilla.samba.org
- github.com github.com
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
- access.redhat.com access.redhat.com
- GLSA-202309-06 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de samba
Les 40 CVE de samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
Élevée
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
Élevée
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Moyenne
CVE-2023-0225
A flaw was found in Samba
4.3
Moyenne