Samba Fixed Vulnerabilities that allow for full domain takeover. Find all vulnerable Samba versions with Lansweeper ► https://www.lansweeper.com/vulnerabil...
Samba has released several security patches addressing 5 vulnerabilities with a CVSS base score between 8.8 and 4.3. Each of these vulnerabilities affects a number of different versions of Samba and may lead to elevation of privileges, account takeovers, loss of availability, confidentiality, and integrity, corrupted log output, and even full domain takeover.
The most severe vulnerability with a base score of 8.8. causes the KDC to accept kpasswd requests encrypted with any key known to it. This would allow a user to change the password of other users by encrypting forged kpasswd requests with its own key. This could deny users access to their accounts as well as allow an attacker to gain full control of the domain by changing the password of an administrator.
Discover Vulnerable Devices
Samba's security advisories list all affected versions, as well as the version numbers that contain the new fixes. We've used this information to create a special Lansweeper report that will provide a list of all devices in your environment that could be affected by the vulnerabilities. This way you have an actionable list of devices that might require a patch or update.
Get the Lansweeper Samba network audit here ► https://www.lansweeper.com/report/sam...
Start your free trial today ► https://www.lansweeper.com/download
Lansweeper enables you to manage your entire IT network, saving an incredible amount of time by automating key tasks. It features best-in-class fully automatic asset scanning and network inventory software, to keep you on top of your IT environment.
Recommended by sysadmins all over the world, download your Lansweeper free trial today and start managing your IT assets the right way.
Useful Links
Website ► https://www.lansweeper.com/
Knowledgebase ► https://www.lansweeper.com/kb/
Forum ► https://www.lansweeper.com/forum/
Blog ► https://www.lansweeper.com/blog/
Let’s Connect
Facebook ► / lansweeper.network.inventory
Twitter ► / lansweeper
Linkedin ► / lansweeper-bvba
Contact ► [email protected]