CVE-2016-2126

 

Published at: - 11-05-2017 04:29

Last modified: - 29-08-2022 10:02

Total changes: - 2

Description

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://www.samba.org/samba/security/CVE-2016-2126.html
• 1037495-Third Party Advisory, VDB Entry
• 94994-Third Party Advisory, VDB Entry
• RHSA-2017:1265-Third Party Advisory
• RHSA-2017:0744-Third Party Advisory
• RHSA-2017:0662-Third Party Advisory
• RHSA-2017:0495-Third Party Advisory
• RHSA-2017:0494-Third Party Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730

 

Keywords

NVD

 

CVE-2016-2126

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures