Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-8143

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.

Published

2015-01-17T02:59:03.617

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 8.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application samba samba 4.0.0 Yes
Application samba samba 4.0.1 Yes
Application samba samba 4.0.2 Yes
Application samba samba 4.0.3 Yes
Application samba samba 4.0.4 Yes
Application samba samba 4.0.5 Yes
Application samba samba 4.0.6 Yes
Application samba samba 4.0.7 Yes
Application samba samba 4.0.8 Yes
Application samba samba 4.0.9 Yes
Application samba samba 4.0.10 Yes
Application samba samba 4.0.11 Yes
Application samba samba 4.0.12 Yes
Application samba samba 4.0.13 Yes
Application samba samba 4.0.14 Yes
Application samba samba 4.0.15 Yes
Application samba samba 4.0.16 Yes
Application samba samba 4.0.17 Yes
Application samba samba 4.0.18 Yes
Application samba samba 4.0.19 Yes
Application samba samba 4.0.20 Yes
Application samba samba 4.0.21 Yes
Application samba samba 4.0.22 Yes
Application samba samba 4.0.23 Yes
Application samba samba 4.1.0 Yes
Application samba samba 4.1.1 Yes
Application samba samba 4.1.2 Yes
Application samba samba 4.1.3 Yes
Application samba samba 4.1.4 Yes
Application samba samba 4.1.5 Yes
Application samba samba 4.1.6 Yes
Application samba samba 4.1.7 Yes
Application samba samba 4.1.8 Yes
Application samba samba 4.1.9 Yes
Application samba samba 4.1.10 Yes
Application samba samba 4.1.11 Yes
Application samba samba 4.1.12 Yes
Application samba samba 4.1.13 Yes
Application samba samba 4.1.14 Yes
Application samba samba 4.1.15 Yes
Application samba samba 4.2.0 Yes
Application samba samba 4.2.0 Yes
Application samba samba 4.2.0 Yes
References