A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object's creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the 'creator owner.' The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ctdb", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "ctdb-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "ldb-tools", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "ldb-tools-dbgsym", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libldb-dev", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libldb2", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libldb2-dbgsym", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libnss-winbind", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libnss-winbind-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libpam-winbind", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libpam-winbind-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libsmbclient-dev", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libsmbclient0", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libsmbclient0-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libwbclient-dev", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libwbclient0", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "libwbclient0-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "python3-ldb", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "python3-ldb-dbgsym", "binary_version": "2:2.9.1+samba4.20.4+dfsg-1ubuntu1" }, { "binary_name": "python3-ldb-dev", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "python3-samba", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "python3-samba-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "registry-tools", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "registry-tools-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-ad-dc", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-ad-dc-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-ad-provision", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-common", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-common-bin", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-common-bin-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-dev", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-dsdb-modules", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-dsdb-modules-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-libs", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-libs-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-testsuite", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-testsuite-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-ceph", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-ceph-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-glusterfs", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-glusterfs-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-modules", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "samba-vfs-modules-extra", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "smbclient", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "smbclient-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "winbind", "binary_version": "2:4.20.4+dfsg-1ubuntu1" }, { "binary_name": "winbind-dbgsym", "binary_version": "2:4.20.4+dfsg-1ubuntu1" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ctdb", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "ctdb-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "ldb-tools", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "ldb-tools-dbgsym", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libldb-dev", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libldb2", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libldb2-dbgsym", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libnss-winbind", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libnss-winbind-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libpam-winbind", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libpam-winbind-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libsmbclient-dev", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libsmbclient0", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libsmbclient0-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libwbclient-dev", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libwbclient0", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "libwbclient0-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "python3-ldb", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "python3-ldb-dbgsym", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "python3-ldb-dev", "binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9" }, { "binary_name": "python3-samba", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "python3-samba-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "registry-tools", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "registry-tools-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-ad-dc", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-ad-provision", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-common", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-common-bin", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-common-bin-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-dev", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-dsdb-modules", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-dsdb-modules-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-libs", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-libs-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-testsuite", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-testsuite-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-vfs-modules", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-vfs-modules-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-vfs-modules-extra", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "samba-vfs-modules-extra-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "smbclient", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "smbclient-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "winbind", "binary_version": "2:4.19.5+dfsg-4ubuntu9" }, { "binary_name": "winbind-dbgsym", "binary_version": "2:4.19.5+dfsg-4ubuntu9" } ], "ubuntu_priority": "medium" }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ctdb", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "ctdb-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "ldb-tools", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "ldb-tools-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libldb-dev", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libldb2", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libldb2-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libnss-winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libnss-winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libpam-winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libpam-winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libsmbclient-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libsmbclient0", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libsmbclient0-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtalloc-dev", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtalloc2", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtalloc2-dbgsym", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtdb-dev", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtdb1", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtdb1-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtevent-dev", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtevent0t64", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libtevent0t64-dbgsym", "binary_version": "2:0.16.1+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libwbclient-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libwbclient0", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "libwbclient0-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-ldb", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-ldb-dbgsym", "binary_version": "2:2.10.0+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-samba", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-samba-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-talloc", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-talloc-dbgsym", "binary_version": "2:2.4.2+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-tdb", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "python3-tdb-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "registry-tools", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "registry-tools-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-ad-dc", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-ad-dc-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-ad-provision", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-common", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-common-bin", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-common-bin-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-dev", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-dsdb-modules", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-dsdb-modules-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-libs", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-libs-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-testsuite", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-testsuite-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-ceph", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-ceph-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-glusterfs", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-glusterfs-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-modules", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "samba-vfs-modules-extra", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "smbclient", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "smbclient-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "tdb-tools", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "tdb-tools-dbgsym", "binary_version": "2:1.4.12+samba4.21.4+dfsg-1ubuntu3" }, { "binary_name": "winbind", "binary_version": "2:4.21.4+dfsg-1ubuntu3" }, { "binary_name": "winbind-dbgsym", "binary_version": "2:4.21.4+dfsg-1ubuntu3" } ], "ubuntu_priority": "medium" }