Home

CVE-2018-1139

Description

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.526

Associated Vulnerability

VulnerabilityOS Platform
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.7.6+dfsg~ubuntu-0ubuntu2.2_i386.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.7.6+dfsg~ubuntu-0ubuntu2.2_amd64.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.3.11+dfsg-0ubuntu0.14.04.16_i386.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.3.11+dfsg-0ubuntu0.14.04.16_amd64.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.3.11+dfsg-0ubuntu0.16.04.15_i386.debLinux
SMB/CIFS file, print, and login server for Unix (USN-3738-1) samba_4.3.11+dfsg-0ubuntu0.16.04.15_amd64.debLinux
Samba security update (CESA-2017:3260) ctdb-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-dc-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) ctdb-tests-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-libs-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) samba-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-pidl-4.8.3-4.el7.noarch.rpmLinux
Samba security update (CESA-2017:3260) samba-test-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) libwbclient-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) libwbclient-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-devel-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) samba-devel-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) libsmbclient-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) libsmbclient-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-client-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-common-4.8.3-4.el7.noarch.rpmLinux
Samba security update (CESA-2017:3260) samba-python-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-dc-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-winbind-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-test-libs-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) samba-test-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) libwbclient-devel-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) libwbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-client-libs-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) samba-client-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-common-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) libsmbclient-devel-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) libsmbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-common-tools-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-krb5-printing-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-vfs-glusterfs-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-winbind-clients-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-winbind-modules-4.8.3-4.el7.i686.rpmLinux
Samba security update (CESA-2017:3260) samba-winbind-modules-4.8.3-4.el7.x86_64.rpmLinux
Samba security update (CESA-2017:3260) samba-winbind-krb5-locator-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libsmbclient-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libsmbclient-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libsmbclient-devel-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libsmbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libwbclient-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libwbclient-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libwbclient-devel-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update libwbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-client-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-client-libs-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-client-libs-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-common-4.8.3-4.el7.noarch.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-common-libs-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-common-tools-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-dc-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-dc-libs-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-devel-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-devel-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-krb5-printing-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-libs-4.8.3-4.el7.i686.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-libs-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-pidl-4.8.3-4.el7.noarch.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-python-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-python-test-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-test-4.8.3-4.el7.x86_64.rpmLinux
(RHSA-2018:3056) samba security, bug fix, and enhancement update samba-test-libs-4.8.3-4.el7.i686.rpmLinux
Ctdb update (ELSA-2018-3056) ctdb-4.8.3-4.el7.x86_64.rpmLinux
Ctdb-tests update (ELSA-2018-3056) ctdb-tests-4.8.3-4.el7.x86_64.rpmLinux
Libsmbclient update (ELSA-2018-3056) libsmbclient-4.8.3-4.el7.x86_64.rpmLinux
Libsmbclient-devel update (ELSA-2018-3056) libsmbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
Libwbclient update (ELSA-2018-3056) libwbclient-4.8.3-4.el7.x86_64.rpmLinux
Libwbclient-devel update (ELSA-2018-3056) libwbclient-devel-4.8.3-4.el7.x86_64.rpmLinux
Samba update (ELSA-2018-3056) samba-4.8.3-4.el7.x86_64.rpmLinux
Samba-client update (ELSA-2018-3056) samba-client-4.8.3-4.el7.x86_64.rpmLinux
Samba-client-libs update (ELSA-2018-3056) samba-client-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba-common-libs update (ELSA-2018-3056) samba-common-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba-common-tools update (ELSA-2018-3056) samba-common-tools-4.8.3-4.el7.x86_64.rpmLinux
Samba-dc update (ELSA-2018-3056) samba-dc-4.8.3-4.el7.x86_64.rpmLinux
Samba-dc-libs update (ELSA-2018-3056) samba-dc-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba-devel update (ELSA-2018-3056) samba-devel-4.8.3-4.el7.x86_64.rpmLinux
Samba-krb5-printing update (ELSA-2018-3056) samba-krb5-printing-4.8.3-4.el7.x86_64.rpmLinux
Samba-libs update (ELSA-2018-3056) samba-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba-python update (ELSA-2018-3056) samba-python-4.8.3-4.el7.x86_64.rpmLinux
Samba-python-test update (ELSA-2018-3056) samba-python-test-4.8.3-4.el7.x86_64.rpmLinux
Samba-test update (ELSA-2018-3056) samba-test-4.8.3-4.el7.x86_64.rpmLinux
Samba-test-libs update (ELSA-2018-3056) samba-test-libs-4.8.3-4.el7.x86_64.rpmLinux
Samba-vfs-glusterfs update (ELSA-2018-3056) samba-vfs-glusterfs-4.8.3-4.el7.x86_64.rpmLinux
Samba-winbind update (ELSA-2018-3056) samba-winbind-4.8.3-4.el7.x86_64.rpmLinux
Samba-winbind-clients update (ELSA-2018-3056) samba-winbind-clients-4.8.3-4.el7.x86_64.rpmLinux
Samba-winbind-krb5-locator update (ELSA-2018-3056) samba-winbind-krb5-locator-4.8.3-4.el7.x86_64.rpmLinux
Samba-winbind-modules update (ELSA-2018-3056) samba-winbind-modules-4.8.3-4.el7.x86_64.rpmLinux
Samba-common update (ELSA-2018-3056) samba-common-4.8.3-4.el7.noarch.rpmLinux
Samba-pidl update (ELSA-2018-3056) samba-pidl-4.8.3-4.el7.noarch.rpmLinux
Libsmbclient update (ELSA-2018-3056) libsmbclient-4.8.3-4.el7.i686.rpmLinux
Libsmbclient-devel update (ELSA-2018-3056) libsmbclient-devel-4.8.3-4.el7.i686.rpmLinux
Libwbclient update (ELSA-2018-3056) libwbclient-4.8.3-4.el7.i686.rpmLinux
Libwbclient-devel update (ELSA-2018-3056) libwbclient-devel-4.8.3-4.el7.i686.rpmLinux
Samba-client-libs update (ELSA-2018-3056) samba-client-libs-4.8.3-4.el7.i686.rpmLinux
Samba-devel update (ELSA-2018-3056) samba-devel-4.8.3-4.el7.i686.rpmLinux
Samba-libs update (ELSA-2018-3056) samba-libs-4.8.3-4.el7.i686.rpmLinux
Samba-test-libs update (ELSA-2018-3056) samba-test-libs-4.8.3-4.el7.i686.rpmLinux
Samba-winbind-modules update (ELSA-2018-3056) samba-winbind-modules-4.8.3-4.el7.i686.rpmLinux
Insufficiently Protected Credentials Vulnerability (CVE-2018-1139)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234