Attachment 18526 Details for Bug 15707 – Advisory (draft)

Advisory (draft)

Advisory draft.txt (text/plain), 1.18 KB, created by Anoop C S on 2025-01-09 10:38:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Anoop C S

Created: 2025-01-09 10:38:59 UTC

Size: 1.18 KB

patch

obsolete

>===========================================================
>== Subject: smbd allows prolonged access to previously authenticated
>==          user sessions.
>==
>== CVE ID#:
>==
>== Versions: All versions starting with 4.21.0
>==
>== Summary: Reauthenticating as a different user in an already existing user
>==          session continues to operate with previous user privileges.
>===========================================================
>
>===========
>Description
>===========
>
>
>==================
>Patch Availability
>==================
>
>The Samba Team decided not to issue a dedicated security release,
>see https://wiki.samba.org/index.php/Samba_Security_Process.
>
>See https://bugzilla.samba.org/show_bug.cgi?id=15707
>
>==================
>CVSSv4 calculation
>==================
>
>CVSS 4.0: AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/R:I/V:C/RE:L (7)
>
>==========
>Workaround
>==========
>
>None.
>
>=======
>Credits
>=======
>
>Originally reported by Anoop C S of the Samba Team.
>
>Patch provided by Ralph Boehme of the Samba team.
>
>==========================================================
>== Our Code, Our Bugs, Our Responsibility.
>== The Samba Team
>==========================================================

Actions: View

Attachments on bug 15707: 18431 | 18432 | 18526 | 18606 | 18607 | 18644 | 18645 | 18646