遠端主機上執行的 Samba 版本比 3.2.3 舊。因此會受到權限提升弱點影響。未經驗證的遠端攻擊者可加以惡意利用，以取得對系統的提升的存取權限或系統管理員存取權限。請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

远程主机上运行的 Samba 版本低于 3.2.3。因此，它受到权限升级漏洞的影响。未经身份验证的远程攻击者可利用此问题获取对系统的特权访问权限或管理员访问权限。请注意，Nessus 没有测试此问题，而仅依赖于应用程序自我报告的版本号。

リモートホストで実行されているSambaのバージョンは3.2.3より前です。したがって、権限昇格の脆弱性の影響を受けます。認証されていないリモートの攻撃者がこれを悪用し、権限やシステムへの管理者アクセス権を取得する可能性があります。Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The version of Samba running on the remote host is prior to 3.2.3. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain privileged or administrator access to the system.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2008-3789 detailed in the upstream advisory:
http://www.samba.org/samba/security/CVE-2008-3789.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has samba packages installed that are affected by multiple vulnerabilities:

  - The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide ...enhanced compatibility     with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver. Samba versions prior to     4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via     specially crafted extended file attributes. A remote attacker with write access to extended file     attributes can execute arbitrary code with the privileges of smbd, typically root. (CVE-2021-44142)

  - Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows     local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors     that cause the daemon to transition to the root user. (CVE-2007-2444)

  - Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files,     which allows local users to modify the membership of Unix groups. (CVE-2008-3789)

  - smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a     denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a cut&paste     error that causes an improper bounds check to be performed. (CVE-2008-4314)

  - smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE     capability, which allows remote authenticated users to bypass intended file permissions via standard     filesystem operations with any client. (CVE-2010-0728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This is an update to version 3.2.3 of Samba.

This release includes several bugfixes and performance enhancements for Samba and its components. It is recommended for every user to update to this version.

Among several other bugs the following list shows some detail :

  - Fix a race condition in winbind leading to a crash     (bnc#406623).

  - Fix emptying the printing queue; (bnc#411493).

  - Fix the webinface SWAT; (bnc#391969).

  - Fixed a file permission problem. (CVE-2008-3789)     bnc#420634

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has samba packages installed that are affected by multiple vulnerabilities:

  - The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide ...enhanced compatibility     with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver. Samba versions prior to     4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via     specially crafted extended file attributes. A remote attacker with write access to extended file     attributes can execute arbitrary code with the privileges of smbd, typically root. (CVE-2021-44142)

  - Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows     local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors     that cause the daemon to transition to the root user. (CVE-2007-2444)

  - Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files,     which allows local users to modify the membership of Unix groups. (CVE-2008-3789)

  - smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a     denial of service via crafted (1) trans, (2) trans2, and (3) nttrans requests, related to a cut&paste     error that causes an improper bounds check to be performed. (CVE-2008-4314)

  - smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE     capability, which allows remote authenticated users to bypass intended file permissions via standard     filesystem operations with any client. (CVE-2010-0728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
122057	Samba 3.2.x < 3.2.3 Privilege Escalation Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	critical
122057	Samba 3.2.x < 3.2.3 Privilege Escalation Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	critical
122057	Samba 3.2.x < 3.2.3の権限昇格の脆弱性	Nessus	Misc.	2019/2/8	2019/10/31	critical
122057	Samba 3.2.x < 3.2.3 Privilege Escalation Vulnerability	Nessus	Misc.	2019/2/8	2019/10/31	critical
34100	Fedora 9 : samba-3.2.3-0.20.fc9 (2008-7243)	Nessus	Fedora Local Security Checks	2008/9/8	2021/1/11	low
266281	NewStart CGSL MAIN 6.06 : samba Multiple Vulnerabilities (NS-SA-2025-0208)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	high
40126	openSUSE Security Update : samba (samba-174)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	low
301208	NewStart CGSL MAIN 6.06 (SP) : samba Multiple Vulnerabilities (NS-SA-2026-0007)	Nessus	NewStart CGSL Local Security Checks	2026/3/6	2026/3/9	high

检测

插件搜索

critical

critical

critical

critical

low

high

low

high