Upstream information
Description
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.SUSE information
Overall state of this security issue: Resolved
This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 1.2 | 
| Vector | AV:L/AC:H/Au:N/C:P/I:N/A:N | 
| Access Vector | Local | 
| Access Complexity | High | 
| Authentication | None | 
| Confidentiality Impact | Partial | 
| Integrity Impact | None | 
| Availability Impact | None | 
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| SUSE Linux Enterprise Server 16.0 | 
  |  Patchnames:  SUSE Linux Enterprise Server 16.0 GA cifs-utils-7.4-160000.2.2 SUSE Linux Enterprise Server 16.0 GA ctdb-4.22.3+git.401.c70158430cc-160000.2.2  | 
| SUSE Linux Micro 6.0 | 
  |  Patchnames:  SUSE Linux Micro 6.0 GA cifs-utils-7.0-2.9 SUSE Linux Micro 6.0 GA samba-client-libs-4.19.4+git.339.acf1ccaa02-1.22  | 
| SUSE Linux Micro 6.1 | 
  |  Patchnames:  SUSE Linux Micro 6.1 GA cifs-utils-7.0-slfo.1.1_1.1 SUSE Linux Micro 6.1 GA samba-client-libs-4.20.2+git.348.4fb6af61307-slfo.1.1_1.8  | 
| openSUSE Tumbleweed | 
  |  Patchnames:  openSUSE-Tumbleweed-2024-10683 openSUSE-Tumbleweed-2024-11365  | 
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 01:50:40 2013CVE page last modified: Sun Nov 2 12:15:14 2025