CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HA flaw was found in Samba Active Directory Domain Controller (AD DC). Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on new LDAP connections and elevate privileges, potentially leading to complete domain compromise.
Multiple vulnerabilities have been discovered in Samba, potentially leading to denial of service, data confidentiality breaches, and policy bypasses. These vulnerabilities affect older versions of the Samba server softwa…