CVE-2007-4138 - Secunia.com

CVE Reference: CVE-2007-4138
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4138

Description: The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/36560 ST 1018681 SREASON http://securityreason.com/securityalert/3135 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.419439 SAID Secunia Advisory: SA26776 Secunia Advisory: SA26764 Secunia Advisory: SA26795 Secunia Advisory: SA26834 REDHAT http://www.redhat.com/support/errata/RHSA-2007-1016.html http://www.redhat.com/support/errata/RHSA-2007-1017.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10375 FEDORA CONFIRM http://docs.info.apple.com/article.html?artnum=307179 http://www.samba.org/samba/security/CVE-2007-4138.html CERT http://www.us-cert.gov/cas/techalerts/TA07-352A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/479078/100/0/threaded BID 25636

Return to the previous page.

Secunia