PT-1998-1192 · Samba Team+1 · Samba

Published 1998-11-19 · Updated 2017-10-10 · CVE-1999-1288

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Samba version 1.9.18

Description The issue arises from a prototype application, wsmbconf, being inadvertently included in Samba. This application is installed with incorrect permissions, including the setgid bit. As a result, local users can read and write files, potentially exploiting bugs in the program to gain privileges.

Recommendations For Samba version 1.9.18, consider removing the setgid bit from the wsmbconf application to prevent local users from exploiting incorrect permissions. Additionally, restrict access to the wsmbconf application until a proper fix is available.

Fix

Related Identifiers

CVE-1999-1288

Affected Products

Samba

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1288 · Security Note
• http://caldera.com/support/security/advisories/SA-1998.35.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1406 · Note
• http://securityfocus.com/archive/1/11397 · Note
• https://samba.org/samba/security/CVE-1999-1288 · Note