PT-2017-3736 · Samba+5 · Samba+5

Stefan Metzmacher · Published 2017-09-20 · Updated 2024-06-15 · CVE-2017-12151

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.4.16 Samba versions prior to 4.5.14 Samba versions prior to 4.6.8

Description: The issue is related to the lack of signing and encryption requirements for SMB traffic when using DFS redirects. This can be exploited by a remote attacker to perform a man-in-the-middle attack, allowing them to read or alter the traffic.

Recommendations: For versions prior to 4.4.16, update to version 4.4.16 or later. For versions prior to 4.5.14, update to version 4.5.14 or later. For versions prior to 4.6.8, update to version 4.6.8 or later.

Exploit

Fix

Weakness Enumeration

CWE-300

CWE-310

Related Identifiers

ALT-PU-2017-2287

ALT-PU-2017-2288

ALT-PU-2018-2488

ALT-PU-2018-2489

BDU:2019-00224

CESA-2017_2790

CVE-2017-12151

DSA-3983-1

ECHO-3A2E-E8A7-A38B

MGASA-2018-0023

OPENSUSE-SU-2024:11365-1

RHSA-2017:2790

RHSA-2017:2858

RHSA-2017_2790

SUSE-SU-2017:2650-1

SUSE-SU-2017:2695-1

SUSE-SU-2017:2704-1

SUSE-SU-2017:2726-1

SUSE-SU-2017:2971-1

SUSE-SU-2017:3155-1

USN-3426-1

Affected Products

Alt Linux

Centos

Red Hat

Samba

Suse

Ubuntu

References · 140

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-7494.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2017-7494 · Exploit
• 🔥 https://github.com/joxeankoret/CVE-2017-7494 · Exploit
• 🔥 https://github.com/betab0t/cve-2017-7494 · Exploit
• 🔥 https://github.com/d3fudd/CVE-2017-7494_SambaCry · Exploit
• 🔥 https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494 · Exploit
• 🔥❌ https://github.com/elellacode/exploit-CVE-2017-7494 · Exploit, Deleted
• https://osv.dev/vulnerability/USN-3426-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12150 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00224 · Security Note
• https://samba.org/samba/security/CVE-2017-12151.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3426-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:3155-1 · Vendor Advisory
• https://debian.org/security/2017/dsa-3983 · Vendor Advisory