DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Samba: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-11-09
Ein entfernter, authetisierter oder anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, seine Rechte zu erweitern und die Domäne vollständig zu kompromittieren.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25721US | high8.8 | — | ||
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountNam… | ||||
| CVE-2021-3738US | high8.8 | — | ||
In DCE/RPC it is possible to share the handles (cookies for resource state) between multiple connections via a mechanism called 'association groups'. These handles can reference co… | ||||
| CVE-2021-23192US | high7.5 | — | ||
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fr… | ||||
| CVE-2020-25722US | high8.8OT erhöht | — | ||
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise. | ||||
| CVE-2020-25719US | high7.2 | — | ||
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a… | ||||
| CVE-2020-25718US | high8.8OT erhöht | — | ||
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrat… | ||||
| CVE-2020-25717US | high8.1 | — | ||
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation. | ||||
| CVE-2016-2124US | medium5.9 | — | ||
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentica… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2021-5082 vom 2021-12-14external
- Oracle Linux Security Advisory ELSA-2021-5142 vom 2021-12-16external
- Red Hat Security Advisory RHSA-2021:4843 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2021:4844 vom 2021-11-29external
- Red Hat Security Advisory RHSA-2021:5082 vom 2021-12-13external
- Red Hat Security Advisory RHSA-2021:5142 vom 2021-12-15external
- Red Hat Security Advisory RHSA-2021:5192 vom 2021-12-16external
- Red Hat Security Advisory RHSA-2021:5195 vom 2021-12-16external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan