CVE-2007-4138

Name	CVE-2007-4138
Description	The Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the (1) RFC2307 or (2) Services for UNIX (SFU) primary group attribute is not defined.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
samba (PTS)	buster, buster (security)	2:4.9.5+dfsg-5+deb10u3	fixed
	bullseye (security), bullseye	2:4.13.13+dfsg-1~deb11u5	fixed
	bookworm	2:4.17.5+dfsg-2	fixed
	sid	2:4.17.6+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
samba	source	sarge	(not affected)
samba	source	etch	(not affected)
samba	source	(unstable)	3.0.26-1

[etch] - samba <not-affected> (Vulnerable code was introduced in 3.0.25)
[sarge] - samba <not-affected> (Vulnerable code was introduced in 3.0.25)