CVE-2014-8143 — Vulnetix

Try Vulnetix Request Demo

CVE-2014-8143 PUBLISHED

Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users to set the LDB userAccountControl UF_SERVER_TRUST_ACCOUNT bit, and consequently gain privileges, by leveraging delegation of authority for user-account or computer-account creation.

EPSS 4.90% · 89.5th percentile

Risk Scores

EPSS Score

4.90%

89.5th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:14.04:LTS	samba	0, 2:3.6.18-1ubuntu3, 2:4.0.10+dfsg-4ubuntu2

Timeline

Jan 16, 2015 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score
Jul 10, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2014-8143 third-party-advisory
https://www.samba.org/samba/security/CVE-2014-8143 third-party-advisory
https://download.samba.org/pub/samba/patches/security/samba-4.1.15-CVE-2014-8143.patch third-party-advisory
https://download.samba.org/pub/samba/patches/security/samba-4.0.23-CVE-2014-8143.patch third-party-advisory
https://ubuntu.com/security/notices/USN-2481-1 vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2014-8143 third-party-advisory

Open in Interactive Console →