PT-2006-2093 · Samba · Samba

Published 2006-03-30 · Updated 2024-06-15 · CVE-2006-1059

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions 3.0.21 through 3.0.21c

Description The issue allows local users to obtain the machine trust account password and spoof the server in the domain. This is due to the winbindd daemon writing the machine trust account password in cleartext in log files. Local attackers can gain access to the machine trust account of affected computers, potentially impersonating the affected server in the domain and gaining access to sensitive information, including users and groups. Successful exploitation requires the log level to be set to 5 or above.

Recommendations For Samba versions 3.0.21 through 3.0.21c, consider disabling the winbindd daemon or restricting access to the log files until a fix is available. Additionally, set the log level to a value below 5 to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1059

OPENSUSE-SU-2024:10683-1

OPENSUSE-SU-2024:11365-1

Affected Products

Samba

References · 87

• https://osv.dev/vulnerability/openSUSE-SU-2024:11365-1 · Vendor Advisory
• http://us1.samba.org/samba/security/CAN-2006-1059.html · Patch
• http://trustix.org/errata/2006/0018 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-1059 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-1059 · Vendor Advisory
• http://secunia.com/advisories/19455 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10683-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1059 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2006-March/msg00114.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1059 · Security Note
• https://suse.com/security/cve/CVE-2020-14383 · Note
• https://suse.com/security/cve/CVE-2020-27840 · Note
• https://suse.com/security/cve/CVE-2020-10700 · Note
• https://suse.com/security/cve/CVE-2019-14870 · Note
• https://suse.com/security/cve/CVE-2007-4138 · Note