CVE-2006-1059
published 2006-03-30CVE-2006-1059: The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the…
PriorityP410low1.2CVSS 2.0
AVLACHAuNCPINAN
EPSS
0.46%
37.7th percentile
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | samba | < samba 3.0.22-1 (bookworm) | samba 3.0.22-1 (bookworm) |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | >= 0 < 3.0.22-1 | 3.0.22-1 |
| samba | samba | >= 0 < 3.0.22-1 | 3.0.22-1 |
| samba | samba | >= 0 < 3.0.22-1 | 3.0.22-1 |
| samba | samba | >= 0 < 3.0.22-1 | 3.0.22-1 |
CVSS provenance
nvdv2.01.2LOWAV:L/AC:H/Au:N/C:P/I:N/A:N
osv1.2LOW
vendor_debian1.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2006-1059: samba - The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account ...
vendor_debian·2006·CVSS 1.2
CVE-2006-1059 [LOW] CVE-2006-1059: samba - The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account ...
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
Scope: local
bookworm: resolved (fixed in 3.0.22-1)
bullseye: resolved (fixed in 3.0.22-1)
forky: resolved (fixed in 3.0.22-1)
sid: resolved (fixed in 3.0.22-1)
trixie: resolved (fixed in 3.0.22-1)
GHSA
GHSA-cgxg-c5wj-xpf3: The winbindd daemon in Samba 3
ghsa_unreviewed·2022-05-01
CVE-2006-1059 [LOW] GHSA-cgxg-c5wj-xpf3: The winbindd daemon in Samba 3
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
OSV
CVE-2006-1059: The winbindd daemon in Samba 3
osv·2006-03-30·CVSS 1.2
CVE-2006-1059 [LOW] CVE-2006-1059: The winbindd daemon in Samba 3
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/19455http://secunia.com/advisories/19468http://secunia.com/advisories/19539http://securitytracker.com/id?1015850http://us1.samba.org/samba/security/CAN-2006-1059.htmlhttp://www.osvdb.org/24263http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.htmlhttp://www.securityfocus.com/archive/1/429370/100/0/threadedhttp://www.securityfocus.com/bid/17314http://www.trustix.org/errata/2006/0018http://www.vupen.com/english/advisories/2006/1179https://exchange.xforce.ibmcloud.com/vulnerabilities/25575http://secunia.com/advisories/19455http://secunia.com/advisories/19468http://secunia.com/advisories/19539http://securitytracker.com/id?1015850http://us1.samba.org/samba/security/CAN-2006-1059.htmlhttp://www.osvdb.org/24263http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.htmlhttp://www.securityfocus.com/archive/1/429370/100/0/threadedhttp://www.securityfocus.com/bid/17314http://www.trustix.org/errata/2006/0018http://www.vupen.com/english/advisories/2006/1179https://exchange.xforce.ibmcloud.com/vulnerabilities/25575
2006-03-30
Published