| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.0.0, < 4.5.16≥ 4.6.0, < 4.6.14≥ 4.7.0, < 4.7.6 | 4.5.164.6.144.7.6 |
On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free