On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowin...

References

• advisory http://www.securityfocus.com/bid/103382
• advisory http://www.securitytracker.com/id/1040494
• advisory https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html
• advisory https://security.gentoo.org/glsa/201805-07
• advisory https://security.netapp.com/advisory/ntap-20180313-0001/
• advisory https://usn.ubuntu.com/3595-1/
• advisory https://www.debian.org/security/2018/dsa-4135
• advisory https://www.samba.org/samba/security/CVE-2018-1057.html
• advisory https://www.synology.com/support/security/Synology_SA_18_08
• report https://bugzilla.redhat.com/show_bug.cgi?id=1553553