CVE

Id
85744  
CVE No.
CVE-2015-8467  
Status
Candidate  
Description
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.  
Phase
Assigned (20151204)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
754905 85744 CVE-2015-8467 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1290294  View
754906 85744 CVE-2015-8467 CONFIRM:https://git.samba.org/?p=samba.git;a=commit;h=b000da128b5fb519d2d3f2e7fd20e4a25b7dae7d  View
754907 85744 CVE-2015-8467 CONFIRM:https://www.samba.org/samba/security/CVE-2015-8467.html  View
754908 85744 CVE-2015-8467 DEBIAN:DSA-3433  View
754909 85744 CVE-2015-8467 URL:http://www.debian.org/security/2016/dsa-3433  View
754910 85744 CVE-2015-8467 GENTOO:GLSA-201612-47  View
754911 85744 CVE-2015-8467 URL:https://security.gentoo.org/glsa/201612-47  View
754912 85744 CVE-2015-8467 SUSE:openSUSE-SU-2016:1064  View
754913 85744 CVE-2015-8467 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html  View
754914 85744 CVE-2015-8467 SUSE:SUSE-SU-2015:2304  View
754915 85744 CVE-2015-8467 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html  View
754916 85744 CVE-2015-8467 SUSE:SUSE-SU-2015:2305  View
754917 85744 CVE-2015-8467 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html  View
754918 85744 CVE-2015-8467 SUSE:openSUSE-SU-2015:2354  View
754919 85744 CVE-2015-8467 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html  View
754920 85744 CVE-2015-8467 SUSE:openSUSE-SU-2015:2356  View
754921 85744 CVE-2015-8467 URL:http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html  View
754922 85744 CVE-2015-8467 UBUNTU:USN-2855-2  View
754923 85744 CVE-2015-8467 URL:http://www.ubuntu.com/usn/USN-2855-2  View
754924 85744 CVE-2015-8467 UBUNTU:USN-2855-1  View
754925 85744 CVE-2015-8467 URL:http://www.ubuntu.com/usn/USN-2855-1  View
754926 85744 CVE-2015-8467 BID:79735  View
754927 85744 CVE-2015-8467 URL:http://www.securityfocus.com/bid/79735  View
754928 85744 CVE-2015-8467 SECTRACK:1034493  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11691 JVNDB-2015-007011 IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性 IBM Tivoli Storage Manager FastBack のサーバには、バッファオーバーフローの脆弱性が存在します。 CVE-2015-8519 85744 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007011.html  View