CVE-2014-8143

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote…

published January 17, 2015

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04264 · 91.0th percentile
Published
2015-01-17T02:00Z
EPSS history
Timeline
  • 17 JAN 02:00Z
    Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote…
    cvelistv5