CVE-2020-25720

Published: 16 May 2023

Create Child permission should not allow full write to all attributes

Notes

Patches for this CVE have been commited to Samba master, to be
consistent with the changes Microsoft have introduced, but the
stable releases have not been patched. See comment #2 in
upstream bug.
Marking this as deferred until we get more information about
this issue.

Status

References

• https://gitlab.com/samba-team/samba/-/merge_requests/2514
• https://gitlab.com/samba-team/samba/-/commit/cc64ea24daa649dc8de4a212c7abfbe111095655
• https://www.cve.org/CVERecord?id=CVE-2020-25720
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.samba.org/show_bug.cgi?id=14810