Incorrect Default Permissions
Samba does not validate the Validated-DNS-Host-Name right for the "dNSHostName" attribute which could permit unprivileged users to write it. This issue affects versions 4.1.0 through 4.16.6.
CWE-276 - Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.