NVD

Id
28631  
Name
CVE-2015-8467  
Description
The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-12-29  
Modified Date
2016-12-30  
Seq
2015-8467  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150592 28631 CVE-2015-8467 SUSE-SU-2015:2304  View
150593 28631 CVE-2015-8467 SUSE-SU-2015:2305  View
150594 28631 CVE-2015-8467 openSUSE-SU-2015:2354  View
150595 28631 CVE-2015-8467 openSUSE-SU-2015:2356  View
150596 28631 CVE-2015-8467 openSUSE-SU-2016:1064  View
150597 28631 CVE-2015-8467 DSA-3433  View
150598 28631 CVE-2015-8467 79735  View
150599 28631 CVE-2015-8467 1034493  View
150600 28631 CVE-2015-8467 USN-2855-1  View
150601 28631 CVE-2015-8467 USN-2855-2  View
150602 28631 CVE-2015-8467 https://bugzilla.redhat.com/show_bug.cgi?id=1290294  View
150603 28631 CVE-2015-8467 https://git.samba.org/?p=samba.git;a=commit;h=b000da128b5fb519d2d3f2e7fd20e4a25b7dae7d  View
150604 28631 CVE-2015-8467 GLSA-201612-47  View
150605 28631 CVE-2015-8467 https://www.samba.org/samba/security/CVE-2015-8467.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11260 JVNDB-2015-006580 Samba の dsdb/samdb/ldb_modules/samldb.c の samldb_check_user_account_control_acl 関数におけるアクセス制限を回避される脆弱性 Samba の dsdb/samdb/ldb_modules/samldb.c の samldb_check_user_account_control_acl 関数は、マシンのアカウントの作成時に管理権限を適切にチェックしないため、アクセス制限を回避される脆弱性が存在します。 CVE-2015-8467 85692 CVE-2015-8467 28631 6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006580.html 2015-12-10 2016-01-05 View