CVEvulnerability
CVE-2015-8467
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-269
Description
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
Affected configurations
• samba samba (>= 4.0.0 < 4.1.22)
• samba samba (>= 4.2.0 < 4.2.7)
• samba samba (>= 4.3.0 < 4.3.3)
• debian debian linux 7.0
• debian debian linux 8.0
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 15.04
• canonical ubuntu linux 15.10
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2016/dsa-3433 Third Party Advisory
- http://www.securityfocus.com/bid/79735 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034493 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2855-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2855-2 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1290294 Issue Tracking, Third Party Advisory
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=b000da128b5fb519d2d3f2e7fd20e4a25b7dae7d git.samba.org
- https://security.gentoo.org/glsa/201612-47 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2015-8467.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html Mailing List, Third Party Advisory
- http://www.debian.org/security/2016/dsa-3433 Third Party Advisory
- http://www.securityfocus.com/bid/79735 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1034493 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2855-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2855-2 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1290294 Issue Tracking, Third Party Advisory
- https://git.samba.org/?p=samba.git%3Ba=commit%3Bh=b000da128b5fb519d2d3f2e7fd20e4a25b7dae7d git.samba.org
- https://security.gentoo.org/glsa/201612-47 Third Party Advisory
- https://www.samba.org/samba/security/CVE-2015-8467.html Vendor Advisory