| Name | CVE-2012-6150 |
| Description | The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more) |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| samba (PTS) | buster, buster (security) | 2:4.9.5+dfsg-5+deb10u3 | fixed |
| bullseye (security), bullseye | 2:4.13.13+dfsg-1~deb11u5 | fixed | |
| bookworm, sid | 2:4.17.8+dfsg-2 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| samba | source | wheezy | 2:3.6.6-6+deb7u3 | |||
| samba | source | (unstable) | 2:4.0.13+dfsg-1 | low | ||
| samba4 | source | (unstable) | (not affected) |
[squeeze] - samba <no-dsa> (Can be fixed along in a future DSA)
- samba4 <not-affected> (Samba 4 winbind does not implement this feature)
introduced http://git.samba.org/?p=samba.git;a=commit;h=31f1a36901b5b8959dc51401c09c114829b50392
fixed by http://git.samba.org/?p=samba.git;a=commitdiff;h=f62683956a3b182f6a61cc7a2b4ada2e74cde243
https://bugzilla.samba.org/show_bug.cgi?id=10300