Samba Command Injection Vulnerability in WINS Hook Allowing Remote Code Execution

A command injection vulnerability has been identified in Samba's WINS hook handling on Active Directory Domain Controllers. Unsanitized NetBIOS names from WINS registration packets are passed to a shell command and executed, enabling an unauthenticated network attacker to execute arbitrary commands with the privileges of the Samba process, often as root on a domain controller.

Impact

Exploitation of this vulnerability allows for unauthorized execution of commands on the server, potentially leading to a full system compromise.

Remediation

Users can upgrade to Samba versions 4.23.2, 4.22.5, or 4.21.9, all of which include the necessary fix. Instructions for applying the patch can be found in the Samba security release announcements.