Total Domain Compromise in Samba AD DC
Summary
CVE-2020-25722: Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. Affects samba across 2 version ranges.
< 4.13.17-r0
>= df33344d8eb40221d60c99931690703a11d91bc2, < db11778b57610e24324aa4342f89918f66157d71
Fixed in 4.13.17-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Samba is an open-source software suite that provides file and print services for Windows clients. It includes an Active Directory Domain Controller (AD DC) component that allows Samba to act as a domain controller for Windows clients. The AD DC implementation in Samba is vulnerable to multiple flaws that can lead to total domain compromise.
Vulnerability Detail
The vulnerability, identified as CVE-2020-25722, arises from the improper access and conformance checking of stored data in the Samba AD DC. An attacker can exploit these flaws to achieve total domain compromise, potentially gaining unauthorized access to sensitive information, modifying data, or executing arbitrary code within the domain.
How To Fix
Minimum fixed version
4.13.17-r0
This is the first release that contains the fix.
sudo apk add --upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Samba package to a fixed version as soon as possible.
Conclusion
The Samba AD DC implementation is vulnerable to multiple flaws that can result in total domain compromise. It is crucial to update the Samba package to a fixed version to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for samba →
FAQ
Samba is an open-source software suite that provides file and print services for Windows clients. It includes an Active Directory Domain Controller (AD DC) component.
The vulnerability can lead to total domain compromise, allowing an attacker to gain unauthorized access, modify data, or execute arbitrary code within the domain.
To fix this vulnerability, update the Samba package to a fixed version. Refer to the package manager documentation or provided source links for instructions.
No, there is no known workaround for this vulnerability. Updating the Samba package is the recommended solution.
You can find more information about this vulnerability in the provided source links.
Related vulnerabilities
Recent vulnerabilities recorded for samba.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
