CVE-2014-8143
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.3%
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
Affected products
n/a · n/aReferences
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlhttps://download.samba.org/pub/samba/patches/security/samba-4.0.23-CVE-2014-8143.patchhttps://download.samba.org/pub/samba/patches/security/samba-4.1.15-CVE-2014-8143.patchhttp://secunia.com/advisories/62594https://exchange.xforce.ibmcloud.com/vulnerabilities/100596https://www.samba.org/samba/security/CVE-2014-8143http://www.securityfocus.com/bid/72278http://www.securitytracker.com/id/1031615http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416326http://www.ubuntu.com/usn/USN-2481-1