CVE-2019-3870: fedoraproject fedora Incorrect Default Permissions
Vulnerability summary
CVE-2019-3870 is a medium (CVSS 6.1) Incorrect Default Permissions vulnerability in fedoraproject fedora. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.9% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 09-04-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that is owner (root) only access. However in some upgraded installations it will have other permissions, such as 0755, because this was the default before Samba 4.8. Within this directory, files are created with mode 0666, which is world-writable, including a sample krb5.conf, and the list of DNS names and servicePrincipalName values to update.
CVSS metrics
5 scores · 3 sources · 3 versions- NVDNIST6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
- NVDNIST6.1MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
EPSS trend
Probability
0.55%
Chance of exploitation in the next 30 days
Percentile
45%
Versus all other CVEs
30-day change
0.00 pp
From 0.55% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.samba.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Synology5 products
- directory_serverna
- diskstation_manager5.2 | 6.1 | 6.2
- router_manager1.2
- skynasna
- vs960hd_firmware< 2.3.6-1720
Debian1 product
- samba< 2:4.9.5+dfsg-3
Fedoraproject1 product
- fedoraEOL29 | 30
Samba1 product
- samba≥ 4.9.0, < 4.9.6 | ≥ 4.10.0, < 4.10.2
The samba project1 product
- sambaEOL4.9.6 | 4.10.2
5 vendors · 9 products
References
9 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3870X Refsource CONFIRMIssue TrackingThird Party Advisory
