diff options
| author | timur <timur@FreeBSD.org> | 2015-01-16 12:05:17 +0800 |
|---|---|---|
| committer | timur <timur@FreeBSD.org> | 2015-01-16 12:05:17 +0800 |
| commit | 4726cbfec1eb9957829e1732e7260d49ce6c77b9 (patch) | |
| tree | 095e6d5d11ca1a426c3d30a6bcf276738d3a1bd1 | |
| parent | ff34c306a4e741016119f4d44117aaaf45c8841d (diff) | |
| download | freebsd-ports-gnome-4726cbfec1eb9957829e1732e7260d49ce6c77b9.tar.gz freebsd-ports-gnome-4726cbfec1eb9957829e1732e7260d49ce6c77b9.tar.zst freebsd-ports-gnome-4726cbfec1eb9957829e1732e7260d49ce6c77b9.zip | |
Add description of CVE-2014-8143 in net/samba4 and net/samba41
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index bd6e5b100fef..01a2b6149cd2 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,39 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="d4f45676-9d33-11e4-8275-000c292e4fd8"> + <topic>samba -- Elevation of privilege to Active Directory Domain Controller</topic> + <affects> + <package> + <name>samba4</name> + <range><ge>4.0.0</ge><lt>4.0.23</lt></range> + </package> + <package> + <name>samba41</name> + <range><ge>4.1.0</ge><lt>4.1.15</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Samba team reports:</p> + <blockquote cite="https://www.samba.org/samba/security/CVE-2014-8143"> + <p>In Samba's AD DC we neglected to ensure that + attempted modifications of the userAccountControl attribute + did not allow the UF_SERVER_TRUST_ACCOUNT bit to be set. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2014-8143</cvename> + <url>https://www.samba.org/samba/security/CVE-2014-8143</url> + </references> + <dates> + <discovery>2015-01-15</discovery> + <entry>2015-01-16</entry> + </dates> + </vuln> + <vuln vid="7a8a74d1-9c34-11e4-a40b-5453ed2e2b49"> <topic>kde-runtime -- incorrect CBC encryption handling</topic> <affects> |