Samba idmap_ad.so Winbind nss_info Extension Local Privilege Escalation
Medium Nessus Plugin ID 17719
SynopsisThe remote Samba server is affected by a local privilege escalation vulnerability.
DescriptionAccording to its banner, the version of the Samba server installed on the remote host is affected by a local privilege escalation vulnerability. Specifically, the Winbind nss_info extension, when the 'winbind nss info' option is set to 'rfc2307' or 'sfu', grants local users the privileges of gid 0 if the 'RFC2307' or 'Services for UNIX' primary group attribute is not defined.
SolutionUpgrade to Samba version 3.0.26 or later.