Lucene search
Redhat.comRH:CVE-2019-3880HistoryJan 12, 2020 - 3:42 a.m.
CVE-2019-3880
2020-01-1203:42:10
redhat.com
access.redhat.com
16
0.002 Low
EPSS
Percentile
61.2%
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share.
Mitigation
Either turn off SMB1 by setting the global parameter:
'min protocol = SMB2'
or if SMB1 is required turn off unix extensions by setting the global parameter:
'unix extensions = no'
in the smb.conf file.
Related
suse
suse
Security update for samba (important)
2019-04-10 00:00:00
Security update for samba (moderate)
2019-04-29 00:00:00
nessus
nessus
SUSE SLES11 Security Update : samba (SUSE-SU-2019:14042-1)
2019-05-13 00:00:00
SUSE SLES12 Security Update : samba (SUSE-SU-2019:1203-1)
2019-05-13 00:00:00
SUSE SLES12 Security Update : samba (SUSE-SU-2019:1194-1)
2019-05-09 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1708)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1689)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1195-1)
2021-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2019-3880
2019-04-08 00:00:00
cvelist
cvelist
CVE-2019-3880
2019-04-09 15:18:08
redhat
redhat
(RHSA-2019:1967) Moderate: samba security, bug fix and enhancement update
2019-07-30 10:16:50
(RHSA-2019:2099) Moderate: samba security, bug fix, and enhancement update
2019-08-06 08:00:39
(RHSA-2019:1966) Moderate: samba security, bug fix and enhancement update
2019-07-30 09:58:30
ubuntu
ubuntu
Samba vulnerability
2019-04-08 00:00:00
Samba vulnerability
2019-04-08 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2019-3880)
2019-06-03 10:45:01
Security Bulletin: Vulnerability in Open Source Samba affects IBM Netezza Host Management
2019-10-18 03:36:34
Security Bulletin: Vulnerability CVE-2019-3880 in Samba affects IBM i
2022-08-15 16:25:11
samba
samba
Save registry file outside share as unprivileged user
2019-04-08 00:00:00
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2019-08-13 00:00:00
samba security, bug fix, and enhancement update
2019-11-14 00:00:00
alpinelinux
alpinelinux
CVE-2019-3880
2019-04-09 16:29:01
osv
osv
CVE-2019-3880
2019-04-09 16:29:01
samba - security update
2019-04-08 00:00:00
samba - security update
2019-04-09 00:00:00
prion
prion
Design/Logic Flaw
2019-04-09 16:29:00
amazon
amazon
Medium: samba
2019-11-04 22:25:00
Medium: samba
2019-12-13 21:18:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2019-08-30 04:18:41
debian
debian
[SECURITY] [DSA 4427-1] samba security update
2019-04-08 08:26:34
[SECURITY] [DSA 4427-1] samba security update
2019-04-08 08:26:34
[SECURITY] [DLA 1754-1] samba security update
2019-04-09 20:33:14
veracode
veracode
Unauthorized File Write
2019-08-05 00:16:18
nvd
nvd
CVE-2019-3880
2019-04-09 16:29:01
debiancve
debiancve
CVE-2019-3880
2019-04-09 16:29:01
cve
cve
CVE-2019-3880
2019-04-09 16:29:01
fedora
fedora
[SECURITY] Fedora 30 Update: samba-4.10.2-0.fc30
2019-04-13 00:10:07
[SECURITY] Fedora 29 Update: samba-4.9.6-0.fc29
2019-04-16 04:05:09
[SECURITY] Fedora 29 Update: samba-4.9.8-0.fc29
2019-05-18 03:21:47
cisa
cisa
Samba Releases Security Updates
2019-04-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.10.2-alt1
2019-04-11 00:00:00
f5
f5
K20804356 : Samba vulnerabilities CVE-2019-3870 and CVE-2019-3880
2019-05-27 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2019-05-14 00:00:00