NetSight
IP …
medium6.5

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum.

Impact

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.

Affected products

VendorProductAffected versions
SambaSamba
from 4.0.0 before 4.3.13
from 4.4.0 before 4.4.8
from 4.5.0 before 4.5.3

Weakness classification

CWE-264

References