Description
The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.samba.org/samba/security/CVE-2007-4138.html ↗
- http://www.redhat.com/support/errata/RHSA-2007-1016.html ↗
- http://www.securityfocus.com/bid/25636 ↗
- http://www.securityfocus.com/archive/1/479078/100/0/threaded ↗
- http://www.us-cert.gov/cas/techalerts/TA07-352A.html ↗
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.419439 ↗
- http://securityreason.com/securityalert/3135 ↗
- http://www.vupen.com/english/advisories/2007/3120 ↗
- http://secunia.com/advisories/26764 ↗
- http://secunia.com/advisories/26834 ↗
- http://secunia.com/advisories/26795 ↗
- http://www.securitytracker.com/id?1018681 ↗
- https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00201.html ↗
- http://docs.info.apple.com/article.html?artnum=307179 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36560 ↗
- https://issues.rpath.com/browse/RPL-1705 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10375 ↗
- http://secunia.com/advisories/26776 ↗
- http://www.redhat.com/support/errata/RHSA-2007-1017.html ↗