Unscored severity · published Jan 17, 2015
CVE-2014-8143
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8143
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00031.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
secunia.com
http://secunia.com/advisories/62594
www.securityfocus.com
http://www.securityfocus.com/bid/72278
www.securitytracker.com
http://www.securitytracker.com/id/1031615
www.slackware.com
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.416326
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…