NVD

Id
35352  
Name
CVE-2014-8143  
Description
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-16  
Modified Date
2016-12-02  
Seq
2014-8143  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181153 35352 CVE-2014-8143 openSUSE-SU-2015:0375  View
181154 35352 CVE-2014-8143 openSUSE-SU-2016:1064  View
181155 35352 CVE-2014-8143 72278  View
181156 35352 CVE-2014-8143 1031615  View
181157 35352 CVE-2014-8143 SSA:2015-020-01  View
181158 35352 CVE-2014-8143 USN-2481-1  View
181159 35352 CVE-2014-8143 samba-cve20148143-priv-esc(100596)  View
181160 35352 CVE-2014-8143 https://download.samba.org/pub/samba/patches/security/samba-4.0.23-CVE-2014-8143.patch  View
181161 35352 CVE-2014-8143 https://download.samba.org/pub/samba/patches/security/samba-4.1.15-CVE-2014-8143.patch  View
181162 35352 CVE-2014-8143 https://www.samba.org/samba/security/CVE-2014-8143  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18863 JVNDB-2014-007738 Samba における LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit を設定される脆弱性 Samba には、Active Directory ドメインコントローラ (AD DC) が設定されている場合、LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit を設定され、その結果、権限を取得される脆弱性が存在します。 CVE-2014-8143 75436 CVE-2014-8143 35352 8.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007738.html 2014-11-11 2015-01-23 View