CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the pac (privilege attribute certificate) checksum. a remote, authenticated, attacker can cause the winbindd process to crash using a legitimate kerberos ticket. a local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2017-05-11
Last Modified Date: 2018-05-11