CVE-2012-6150

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by…

published December 3, 2013

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03790 · 89.9th percentile
Published
2013-12-03T19:00Z
EPSS history
Timeline
  • 03 DEC 19:00Z
    The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by…
    cvelistv5