Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Samba can run attacker commands via crafted username
published 4 months ago
Summary
The Samba packages for CentOS (libsmbclient, libsmbclient-devel, samba, samba-client, samba-common) could let an attacker execute commands on the server by sending a specially crafted username. This could give the attacker control over the system. Updating the Samba packages to the latest version resolves the issue.
What to do
- Update centos libsmbclient to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos libsmbclient-devel to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-client to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-common to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-doc to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-domainjoin-gui to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-glusterfs to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-swat to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-winbind to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-winbind-clients to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-winbind-devel to version 3.6.23-53.el6_10.tuxcare.els7.
- Update centos samba-winbind-krb5-locator to version 3.6.23-53.el6_10.tuxcare.els7.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:6 | centos | libsmbclient |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | libsmbclient-devel |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-client |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-common |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-doc |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-domainjoin-gui |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-glusterfs |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-swat |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-winbind |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-winbind-clients |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-winbind-devel |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
| TuxCare:CentOS:6 | centos | samba-winbind-krb5-locator |
< 3.6.23-53.el6_10.tuxcare.els7 Fix: upgrade to 3.6.23-53.el6_10.tuxcare.els7
|
Original advisory text
samba: Fix of CVE-2026-4408
- CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict _samr_ValidatePassword to DCs
References
- https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1781627407.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-4408 Vendor Advisory
Timeline
Published22 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1781627407 · OSV
Track software like this
Free during beta