PT-1998-1192 · Samba Team+1 · Samba

Publicado 1998-11-19 · Atualizado 2017-10-10 · CVE-1999-1288

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Samba version 1.9.18

Description The issue arises from a prototype application, wsmbconf, being inadvertently included in Samba. This application is installed with incorrect permissions, including the setgid bit. As a result, local users can read and write files, potentially exploiting bugs in the program to gain privileges.

Recommendations For Samba version 1.9.18, consider removing the setgid bit from the wsmbconf application to prevent local users from exploiting incorrect permissions. Additionally, restrict access to the wsmbconf application until a proper fix is available.

Correção

Identificadores relacionados

CVE-1999-1288

Produtos afetados

Samba

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/1406 · Nota
• http://securityfocus.com/archive/1/11397 · Nota
• https://samba.org/samba/security/CVE-1999-1288 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1288 · Nota de Segurança
• http://caldera.com/support/security/advisories/SA-1998.35.txt · Aviso do Fabricante