OSVDB ID: 3919 Title: Samba mksmbpasswd.sh Uninitialized Passwords |
Info |
|
|
Dates |
||||
|
|
Description |
Samba contains a flaw that may allow a malicious user to gain access. The issue is triggered when mksmbpasswd.sh is used to create accounts, and does not initialize passwords. It is possible that the flaw may allow unauthorized access resulting in a loss of confidentiality and integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management Impact: Loss of Integrity Disclosure: OSVDB Verified |
Solution |
Upgrade to version 3.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
Credit |
Unknown or Incomplete |