GHSA-cgxg-c5wj-xpf3

GHSA-cgxg-c5wj-xpf3 PUBLISHED

Record from GitHub Advisory Database · Published May 1, 2022

The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.

Timeline

May 1, 2022 CVE Published
Apr 29, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-cgxg-c5wj-xpf3
vulnetix vdb fixes GHSA-cgxg-c5wj-xpf3

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-cgxg-c5wj-xpf3/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25575 url
http://secunia.com/advisories/19468 url
http://securitytracker.com/id?1015850 url
http://www.securityfocus.com/archive/1/429370/100/0/threaded url
http://secunia.com/advisories/19539 url
http://us1.samba.org/samba/security/CAN-2006-1059.html url
http://www.osvdb.org/24263 url
http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html url
http://www.securityfocus.com/bid/17314 url
https://nvd.nist.gov/vuln/detail/CVE-2006-1059 advisory
http://secunia.com/advisories/19455 url
http://www.trustix.org/errata/2006/0018 url
http://www.vupen.com/english/advisories/2006/1179 url

Look up in the Resolve Platform →