CVE-2018-1057

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

Vendor	Product	Versions
Samba	Samba	All versions of Samba from 4.0.0 onwards.

References

http://www.securityfocus.com/bid/103382Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040494Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1553553Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201805-07Third Party Advisory
https://security.netapp.com/advisory/ntap-20180313-0001/Third Party Advisory
https://usn.ubuntu.com/3595-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4135Third Party Advisory
https://www.samba.org/samba/security/CVE-2018-1057.htmlMitigation, Vendor Advisory
https://www.synology.com/support/security/Synology_SA_18_08Third Party Advisory
http://www.securityfocus.com/bid/103382Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040494Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1553553Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/201805-07Third Party Advisory
https://security.netapp.com/advisory/ntap-20180313-0001/Third Party Advisory
https://usn.ubuntu.com/3595-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4135Third Party Advisory
https://www.samba.org/samba/security/CVE-2018-1057.htmlMitigation, Vendor Advisory
https://www.synology.com/support/security/Synology_SA_18_08Third Party Advisory

Timeline

Published: Mar 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-105704.8Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.CVE-2018-105716.1Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script CVE-2018-105726.5interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the n CVE-2018-105738.8interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan CVE-2018-105749.8site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the B CVE-2018-105759.8An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unpr CVE-2018-105767.8An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the CVE-2018-105778.8An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before CVE-2018-105789.8An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before CVE-2018-10588.8A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account cou CVE-2018-105805.4The "Latest Posts on Profile" plugin 1.1 for MyBB has XSS because there is an added section in a user profile that displays that user's most CVE-2018-105815.4In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area