sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [SMGLSA-2006-16] Samba: Exposure of machine account credentials

From: George Sherwood <pilot AT beernabeer.com>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] [SMGLSA-2006-16] Samba: Exposure of machine account credentials
Date: Thu, 30 Mar 2006 15:17:43 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Summary
============
The winbindd daemon included in Samba 3.0.21 and subsequent
patch releases (3.0.21a-c) writes the clear text of server's
machine credentials to its log file at level 5. The winbindd
log files are world readable by default and often log files
are requested on open mailing lists as tools used to debug
server misconfigurations.

This affects servers configured to use domain or ads security
and possibly Samba domain controllers as well (if configured
to use winbindd).

Impact
======
The machine trust account password is the secret shared
between a domain controller and a specific member server.
Access to the member server machine credentials allows
an attacker to impersonate the server in the domain and
gain access to additional information regarding domain
users and groups.

Solution:
=========
Update samba as soon as possible to version 3.0.22.

Resolution
==========
All samba users should upgrade to the latest available version:
# scribe update
# cast -c samba

References
============
http://us3.samba.org/samba/security/CAN-2006-1059.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFELDzqkVJnfkgKg60RAigDAJ9pjhziv0FM0/L89CZt7Uty/a68vQCffcZj
NyEmepzSiH5YJhhxR2nrLHQ=
=9l1o
-----END PGP SIGNATURE-----

[SM-Security] [SMGLSA-2006-16] Samba: Exposure of machine account credentials, George Sherwood, 03/30/2006