PT-2020-5784 · Samba+3 · Samba+3

Published 2020-01-21 · Updated 2024-06-15 · CVE-2019-14902

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Samba versions 4.11.x before 4.11.5 Samba versions 4.10.x before 4.10.12 Samba versions 4.9.x before 4.9.18

Description: The issue is related to an error in removing the right to create or modify a subtree, which would not be automatically taken away on all domain controllers. This could allow a remote attacker to access confidential data and compromise its integrity.

Recommendations: For Samba versions 4.11.x before 4.11.5, update to version 4.11.5 or later. For Samba versions 4.10.x before 4.10.12, update to version 4.10.12 or later. For Samba versions 4.9.x before 4.9.18, update to version 4.9.18 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

ALT-PU-2020-1135

ALT-PU-2020-1901

BDU:2021-01744

CVE-2019-14902

DLA-2668-1

DLA-3563-1

ECHO-54FA-C6E5-257C

MGASA-2020-0058

OPENSUSE-SU-2020:0122-1

OPENSUSE-SU-2020_0122-1

OPENSUSE-SU-2024:11365-1

SUSE-SU-2020:0223-1

SUSE-SU-2020:0224-1

SUSE-SU-2020:2673-1

SUSE-SU-2020_0223-1

SUSE-SU-2020_0224-1

USN-4244-1

Affected Products

Alt Linux

Samba

Suse

Ubuntu

References · 132

• https://ubuntu.com/security/CVE-2019-14907 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2668-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19344 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2673-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202003-52 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3563-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14902 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4244-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01744 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-14902 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:0224-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14902 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-14902 · Vendor Advisory