Skip to main content

Incorrect Default Permissions

CVE-2022-32743

High
7.5/10

Summary

Samba does not validate the Validated-DNS-Host-Name right for the "dNSHostName" attribute which could permit unprivileged users to write it. This issue affects versions 4.1.0 through 4.16.6.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • NONE

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

  • Published