2019-04-09 18:29:01 2019-05-16 00:29:00

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

NONE

Integrity

PARTIAL

Availability

PARTIAL
Redhat Gluster storage 3.0 (not an official CPE) Samba Samba 4.10.0 (not an official CPE) Samba Samba 4.9.4 (not an official CPE) Samba Samba 4.9.3 (not an official CPE) Samba Samba 4.9.2 (not an official CPE) Samba Samba 4.9.1 (not an official CPE) Samba Samba 4.9.0 (not an official CPE) Samba Samba 4.8.9 (not an official CPE) Samba Samba 4.8.8 (not an official CPE) Samba Samba 4.8.7 (not an official CPE) Samba Samba 4.8.6 (not an official CPE) Samba Samba 4.8.5 (not an official CPE) Samba Samba 4.8.4 (not an official CPE) Samba Samba 4.8.3 (not an official CPE) Samba Samba 4.8.2 (not an official CPE) Samba Samba 4.8.1 (not an official CPE) Samba Samba 4.8.0 Rc4 (not an official CPE) Samba Samba 4.8.0 Rc3 (not an official CPE) Samba Samba 4.8.0 Rc2 (not an official CPE) Samba Samba 4.8.0 Rc1 (not an official CPE) Samba Samba 4.8.0 (not an official CPE) Samba Samba 4.7.12 (not an official CPE) Samba Samba 4.7.11 (not an official CPE) Samba Samba 4.7.10 (not an official CPE) Samba Samba 4.7.9 (not an official CPE) Samba Samba 4.7.8 (not an official CPE) Samba Samba 4.7.7 (not an official CPE) Samba Samba 4.7.6 (not an official CPE) Samba Samba 4.7.5 (not an official CPE) Samba Samba 4.7.4 (not an official CPE) Samba Samba 4.7.3 (not an official CPE) Samba Samba 4.7.2 (not an official CPE) Samba Samba 4.7.1 (not an official CPE) Samba Samba 4.7.0 Rc6 (not an official CPE) Samba Samba 4.7.0 Rc5 (not an official CPE) Samba Samba 4.7.0 Rc4 (not an official CPE) Samba Samba 4.7.0 Rc3 (not an official CPE) Samba Samba 4.7.0 Rc2 (not an official CPE) Samba Samba 4.7.0 Rc1 (not an official CPE) Samba Samba 4.7.0 (not an official CPE) Samba Samba 4.6.16 (not an official CPE) Samba Samba 4.6.15 (not an official CPE) Samba Samba 4.6.14 (not an official CPE) Samba Samba 4.6.13 (not an official CPE) Samba Samba 4.6.12 (not an official CPE) Samba Samba 4.6.11 (not an official CPE) Samba Samba 4.6.10 (not an official CPE) Samba Samba 4.6.9 (not an official CPE) Samba Samba 4.6.8 (not an official CPE) Samba Samba 4.6.7 (not an official CPE) Samba Samba 4.6.6 (not an official CPE) Samba Samba 4.6.5 (not an official CPE) Samba Samba 4.6.4 (not an official CPE) Samba Samba 4.6.3 (not an official CPE) Samba Samba 4.6.2 (not an official CPE) Samba Samba 4.6.1 (not an official CPE) Samba Samba 4.6.0 Rc4 (not an official CPE) Samba Samba 4.6.0 Rc3 (not an official CPE) Samba Samba 4.6.0 Rc2 (not an official CPE) Samba Samba 4.6.0 Rc1 (not an official CPE) Samba Samba 4.6.0 (not an official CPE) Samba Samba 4.5.16 (not an official CPE) Samba Samba 4.5.15 (not an official CPE) Samba Samba 4.5.14 (not an official CPE) Samba Samba 4.5.13 (not an official CPE) Samba Samba 4.5.12 (not an official CPE) Samba Samba 4.5.11 (not an official CPE) Samba Samba 4.5.10 (not an official CPE) Samba Samba 4.5.9 (not an official CPE) Samba Samba 4.5.8 (not an official CPE) Samba Samba 4.5.7 (not an official CPE) Samba Samba 4.5.6 (not an official CPE) Samba Samba 4.5.5 (not an official CPE) Samba Samba 4.5.4 (not an official CPE) Samba Samba 4.5.3 (not an official CPE) Samba Samba 4.5.2 (not an official CPE) Samba Samba 4.5.1 (not an official CPE) Samba Samba 4.5.0 Rc3 (not an official CPE) Samba Samba 4.5.0 Rc2 (not an official CPE) Samba Samba 4.5.0 Rc1 (not an official CPE) Samba Samba 4.5.0 (not an official CPE) Samba Samba 4.4.16 (not an official CPE) Samba Samba 4.4.15 (not an official CPE) Samba Samba 4.4.14 (not an official CPE) Samba Samba 4.4.13 (not an official CPE) Samba Samba 4.4.12 (not an official CPE) Samba Samba 4.4.11 (not an official CPE) Samba Samba 4.4.10 (not an official CPE) Samba Samba 4.4.9 (not an official CPE) Samba Samba 4.4.8 (not an official CPE) Samba Samba 4.4.7 (not an official CPE) Samba Samba 4.4.6 (not an official CPE) Samba Samba 4.4.5 (not an official CPE) Samba Samba 4.4.4 (not an official CPE) Samba Samba 4.4.3 (not an official CPE) Samba Samba 4.4.2 (not an official CPE) Samba Samba 4.4.1 (not an official CPE) Samba Samba 4.4.0 Rc3 (not an official CPE) Samba Samba 4.4.0 Rc2 (not an official CPE) Samba Samba 4.4.0 Rc1 (not an official CPE) Samba Samba 4.4.0 (not an official CPE) Samba Samba 4.3.13 (not an official CPE) Samba Samba 4.3.12 (not an official CPE) Samba Samba 4.3.11 (not an official CPE) Samba Samba 4.3.10 (not an official CPE) Samba Samba 4.3.9 (not an official CPE) Samba Samba 4.3.8 (not an official CPE) Samba Samba 4.3.7 (not an official CPE) Samba Samba 4.3.6 (not an official CPE) Samba Samba 4.3.5 (not an official CPE) Samba Samba 4.3.4 (not an official CPE) Samba Samba 4.3.3 (not an official CPE) Samba Samba 4.3.2 (not an official CPE) Samba Samba 4.3.1 (not an official CPE) Samba Samba 4.3.0 (not an official CPE) Samba Samba 4.2.14 (not an official CPE) Samba Samba 4.2.13 (not an official CPE) Samba Samba 4.2.12 (not an official CPE) Samba Samba 4.2.11 (not an official CPE) Samba Samba 4.2.10 (not an official CPE) Samba Samba 4.2.9 (not an official CPE) Samba Samba 4.2.8 (not an official CPE) Samba Samba 4.2.7 (not an official CPE) Samba Samba 4.2.6 (not an official CPE) Samba Samba 4.2.5 (not an official CPE) Samba Samba 4.2.4 (not an official CPE) Samba Samba 4.2.3 (not an official CPE) Samba Samba 4.2.2 (not an official CPE) Samba Samba 4.2.1 (not an official CPE) Samba 4.2.0 release candidate 4 Samba 4.2.0 release candidate 3 Samba 4.2.0 release candidate 2 Samba 4.2.0 release candidate 1 Samba Samba 4.2.0 (not an official CPE) Samba Samba 4.1.23 (not an official CPE) Samba Samba 4.1.22 (not an official CPE) Samba Samba 4.1.21 (not an official CPE) Samba Samba 4.1.20 (not an official CPE) Samba Samba 4.1.19 (not an official CPE) Samba Samba 4.1.18 (not an official CPE) Samba Samba 4.1.17 (not an official CPE) Samba 4.1.16 Samba 4.1.15 Samba 4.1.14 Samba 4.1.13 Samba 4.1.12 Samba 4.1.11 Samba 4.1.10 Samba 4.1.9 Samba 4.1.8 Samba 4.1.7 Samba 4.1.6 Samba 4.1.5 Samba 4.1.4 Samba 4.1.3 Samba 4.1.2 Samba 4.1.1 Samba 4.1.0 Samba Samba 4.0.26 (not an official CPE) Samba Samba 4.0.25 (not an official CPE) Samba 4.0.24 Samba 4.0.23 Samba 4.0.22 Samba 4.0.21 Samba 4.0.20 Samba 4.0.19 Samba 4.0.18 Samba 4.0.17 Samba 4.0.16 Samba 4.0.15 Samba 4.0.14 Samba 4.0.13 Samba 4.0.12 Samba 4.0.11 Samba 4.0.10 Samba 4.0.9 Samba 4.0.8 Samba 4.0.7 Samba 4.0.6 Samba 4.0.5 Samba 4.0.4 Samba 4.0.3 Samba 4.0.2 Samba 4.0.1 Samba 4.0.0 Samba Samba 3.6.25 (not an official CPE) Samba 3.6.24 Samba 3.6.23 Samba 3.6.22 Samba 3.6.21 Samba 3.6.20 Samba 3.6.19 Samba 3.6.18 Samba 3.6.17 Samba 3.6.16 Samba 3.6.15 Samba 3.6.14 Samba 3.6.13 Samba 3.6.12 Samba 3.6.11 Samba 3.6.10 Samba 3.6.9 Samba 3.6.8 Samba 3.6.7 Samba 3.6.6 Samba 3.6.5 Samba 3.6.4 Samba 3.6.3 Samba 3.6.2 Samba 3.6.1 Samba 3.6.0 Samba 3.5.22 Samba 3.5.21 Samba 3.5.20 Samba 3.5.19 Samba 3.5.18 Samba 3.5.17 Samba 3.5.16 Samba 3.5.15 Samba 3.5.14 Samba 3.5.13 Samba 3.5.12 Samba 3.5.11 Samba 3.5.10 Samba 3.5.9 Samba 3.5.8 Samba 3.5.7 Samba 3.5.6 Samba 3.5.5 Samba 3.5.4 Samba 3.5.3 Samba 3.5.2 Samba 3.5.1 Samba 3.5.0 Samba 3.4.17 Samba 3.4.16 Samba 3.4.15 Samba 3.4.14 Samba 3.4.13 Samba 3.4.12 Samba 3.4.11 Samba 3.4.10 Samba 3.4.9 Samba 3.4.8 Samba 3.4.7 Samba 3.4.6 Samba 3.4.5 Samba 3.4.4 Samba 3.4.3 Samba 3.4.2 Samba 3.4.1 Samba 3.4.0 Samba 3.3.16 Samba 3.3.15 Samba 3.3.14 Samba 3.3.13 Samba 3.3.12 Samba 3.3.11 Samba 3.3.10 Samba 3.3.9 Samba 3.3.8 Samba 3.3.7 Samba 3.3.6 Samba 3.3.5 Samba 3.3.4 Samba 3.3.3 Samba 3.3.2 Samba 3.3.1 Samba 3.3.0 Samba 3.2.15 Samba 3.2.13 Samba 3.2.14 Samba 3.2.12 Samba 3.2.11 Samba 3.2.10 Samba 3.2.9 Samba 3.2.8 Samba 3.2.7 Samba 3.2.6 Samba 3.2.5 Samba 3.2.4 Samba 3.2.3 Samba 3.2.2 Samba 3.2.1 Samba 3.2.0 Samba 3.1.0 Samba Samba 3.1 (not an official CPE) Samba 3.0.37 Samba 3.0.36 Samba 3.0.35 Samba 3.0.34 Samba 3.0.33 Samba 3.0.32 Samba 3.0.31 Samba 3.0.30 Samba 3.0.29 Samba 3.0.28a Samba 3.0.28 Samba 3.0.27a Samba 3.0.27 Samba 3.0.26a Samba 3.0.26a Samba 3.0.26 Samba 3.0.25c Samba 3.0.25a Samba 3.0.25b Samba 3.0.25 release candidate 3 Samba 3.0.25 release candiate 2 Samba 3.0.25 release candidate 1 Samba 3.0.25 pre2 Samba 3.0.25 pre1 Samba 3.0.25c Samba 3.0.25b Samba 3.0.25a Samba 3.0.25 Samba 3.0.24 Samba 3.0.23d Samba 3.0.23c Samba 3.0.23b Samba 3.0.23a Samba 3.0.23d Samba 3.0.23c Samba 3.0.23b Samba 3.0.23a Samba 3.0.23 Samba 3.0.22 Samba 3.0.21c Samba 3.0.21b Samba 3.0.21a Samba 3.0.21c Samba 3.0.21b Samba 3.0.21a Samba 3.0.21 Samba 3.0.20b Samba 3.0.20a Samba 3.0.20b Samba 3.0.20a Samba 3.0.20 Samba 3.0.19 Samba 3.0.18 Samba 3.0.17 Samba 3.0.16 Samba 3.0.15 Samba 3.0.14a Samba 3.0.14a Samba 3.0.14 Samba 3.0.13 Samba 3.0.12 Samba 3.0.11 Samba 3.0.10 Samba 3.0.9 Samba 3.0.8 Samba 3.0.7 Samba 3.0.6 Samba 3.0.5 Samba 3.0.4 release candidate 1 Samba 3.0.4 Samba 3.0.3 Samba 3.0.2a Samba 3.0.2a Samba 3.0.2 Samba 3.0.1 Samba 3.0.0 Samba Samba 3.0 (not an official CPE) Samba 2.18.3 Samba Samba 2.2a Samba 2.2.12 Samba 2.2.11 Samba 2.2.10 Samba 2.2.9 Samba Samba 2.2.8a Samba 2.2.8a Samba 2.2.8 Samba Samba 2.2.7a Samba 2.2.7a Samba 2.2.7 Samba 2.2.6 Samba 2.2.5 Samba 2.2.4 Samba Samba 2.2.3a Samba 2.2.3a Samba 2.2.3 Samba 2.2.2 Samba Samba 2.2.1a Samba 2.2.1a Samba 2.2.1 Samba Samba 2.2.0a Samba 2.2.0a Samba 2.2.0 Samba 2.2a Samba 2.0.10 Samba 2.0.9 Samba 2.0.8 Samba 2.0.7 Samba 2.0.6 Samba Samba 2.0.5a Samba 2.0.4 Samba 2.0.5a Samba 2.0.5 Samba 2.0.3 Samba 2.0.2 Samba 2.0.1 Samba 2.0.0 Samba Samba 2.0 Samba 1.9.18 p7 Samba 1.9.18 p8 Samba 1.9.18 p6 Samba 1.9.18 p5 Samba 1.9.18 p4 Samba 1.9.18 p3 Samba 1.9.18 p2 Samba 1.9.18 p10 Samba 1.9.18 Samba 1.9.18 p1 Samba 1.9.17 p5 Samba 1.9.17 p4 Samba 1.9.17 p3 Samba 1.9.17 p2 Samba Samba - (not an official CPE) Samba 1.9.17 Samba 1.9.17 p1