- Home
- CVEs with nessus.description==Samba project reports :
In Samba's SAMR server we neglect to ensure that attempted password changes will update the bad password count, nor set the lockout flags.
This would allow a user unlimited attempts against the password by simply calling ChangePasswordUser2 repeatedly.
This is available without any other authentication.
smbcacls can remove a file or directory ACL by mistake.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top