Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-4138
HistorySep 14, 2007 - 1:17 a.m.

CVE-2007-4138

2007-09-1401:17:00
CWE-264
[email protected]
web.nvd.nist.gov
6

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

12.7%

JSON

The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the β€œwinbind nss info” option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.

Affected configurations

Nvd
Node
sambasambaMatch3.0.25
OR
sambasambaMatch3.0.25a
OR
sambasambaMatch3.0.25b
OR
sambasambaMatch3.0.25c
VendorProductVersionCPE
sambasamba3.0.25cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*
sambasamba3.0.25acpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*
sambasamba3.0.25bcpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*
sambasamba3.0.25ccpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*

References

Related

openvas 20
samba 1
cve 1
nessus 10
slackware 1
ubuntucve 1
seebug 1
altlinux 1
veracode 1
securityvulns 2
fedora 1
cvelist 1
freebsd 1
prion 1
debiancve 1
redhat 2
oraclelinux 2
centos 1
osv 2
openvas
openvas
Samba 3.0.25 <= 3.0.25c Vulnerability (CVE-2007-4138)
2021-09-24 00:00:00
Slackware Advisory SSA:2007-255-02 samba
2012-09-11 00:00:00
FreeBSD Ports: samba
2008-09-04 00:00:00
samba
samba
Incorrect primary group assignment for
2007-09-11 00:00:00
cve
cve
CVE-2007-4138
2007-09-14 01:17:00
nessus
nessus
Samba idmap_ad.so Winbind nss_info Extension Local Privilege Escalation
2011-11-18 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 : samba (SSA:2007-255-02)
2007-09-14 00:00:00
Fedora 7 : samba-3.0.26a-0.fc7 (2007-2145)
2007-11-06 00:00:00
slackware
slackware
[slackware-security] samba
2007-09-12 21:56:57
ubuntucve
ubuntucve
CVE-2007-4138
2007-09-14 00:00:00
seebug
seebug
Samba NSS_Infoζ’δ»Άζœ¬εœ°ζƒι™ζε‡ζΌζ΄ž
2007-09-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package samba version 3.0.26a-alt1
2007-09-11 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:17:28
securityvulns
securityvulns
Samba nss_info extension privilege escalation
2007-09-11 00:00:00
[SECURITY] Winbind&#39;s rfc2307 &amp; SFU nss_info plugin in Samba 3.0.25[a-c] assigns users a primary gid of 0 by default
2007-09-11 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: samba-3.0.26a-0.fc7
2007-09-12 16:45:15
cvelist
cvelist
CVE-2007-4138
2007-09-14 01:00:00
freebsd
freebsd
samba -- nss_info plugin privilege escalation vulnerability
2007-09-11 00:00:00
prion
prion
Code injection
2007-09-14 01:17:00
debiancve
debiancve
CVE-2007-4138
2007-09-14 01:17:00
redhat
redhat
(RHSA-2007:1016) Critical: samba security update
2007-11-15 00:00:00
(RHSA-2007:1017) Critical: samba security update
2007-11-15 00:00:00
oraclelinux
oraclelinux
Critical: samba security update
2007-11-23 00:00:00
Critical: samba security update
2007-12-04 00:00:00
centos
centos
samba security update
2007-11-15 18:56:31
osv
osv
cifs-utils-6.13-1.3 on GA media
2024-06-15 00:00:00
ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media
2024-06-15 00:00:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

12.7%

JSON
Related for NVD:CVE-2007-4138
openvas20samba1cve1nessus10slackware1ubuntucve1seebug1altlinux1veracode1securityvulns2fedora1cvelist1freebsd1prion1debiancve1redhat2oraclelinux2centos1osv2