{"id":181775,"date":"2026-05-28T02:48:09","date_gmt":"2026-05-28T00:48:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah"},"modified":"2026-05-28T02:48:09","modified_gmt":"2026-05-28T00:48:09","slug":"uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah","title":{"rendered":"Vuln\u00e9rabilit\u00e9s dans Samba permettant l'ex\u00e9cution \u00e0 distance de code dans des configurations rares.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Des mises \u00e0 jour correctives pour les versions 4.24.3, 4.23.8 et 4.22.10 de Samba, fournissant une impl\u00e9mentation ouverte des protocoles SMB et Active Directory, ont \u00e9t\u00e9 publi\u00e9es. Les nouvelles versions corrigent 6 vuln\u00e9rabilit\u00e9s, dont deux permettent \u00e0 un attaquant distant non authentifi\u00e9 d'ex\u00e9cuter son code sur le serveur :<\/p>\n<ul>\n<li class=\"l\"> CVE-2026-4408 \u2014 vuln\u00e9rabilit\u00e9 dans l'impl\u00e9mentation du serveur SAMR (Security Account Manager) sur DCE\/RPC, utilis\u00e9 pour g\u00e9rer les identifiants et les bases de donn\u00e9es d'utilisateurs et de groupes. Le probl\u00e8me concerne les fichiers <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/\" title=\"serveurs\" data-wpil-keyword-link=\"linked\">serveurs<\/a> et les contr\u00f4leurs de domaine classiques (hors Active Directory), ex\u00e9cutant le processus samba-dcerpcd en tant que service syst\u00e8me (qui n'est pas lanc\u00e9 par d\u00e9faut) et utilisant le script de v\u00e9rification de mot de passe d\u00e9fini dans smb.conf via l'option \u00ab check password script \u00bb avec le symbole de substitution \u00ab %u \u00bb dans la commande de lancement (les configurations sans la substitution \u00ab %u \u00bb ne sont pas affect\u00e9es par le probl\u00e8me).\n<p>La vuln\u00e9rabilit\u00e9 est caus\u00e9e par le fait que les services RPC SamValidatePasswordChange et SamValidatePasswordReset transmettent le nom d'utilisateur et le mot de passe au script d\u00e9fini via l'option \u00ab check password script \u00bb, sans \u00e9chapper les caract\u00e8res sp\u00e9ciaux lors de la substitution du nom d'utilisateur via \u00ab %u \u00bb. Cette vuln\u00e9rabilit\u00e9 permet d'ex\u00e9cuter des commandes shell arbitraires sur <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-dronten\/\" title=\"le serveur\" data-wpil-keyword-link=\"linked\">le serveur<\/a> \u00e0 condition de sp\u00e9cifier un nom d'utilisateur sp\u00e9cialement format\u00e9. Comme solution de contournement, il est conseill\u00e9 de passer le nom d'utilisateur au script non pas via la substitution \u00ab %u \u00bb, mais via la variable d'environnement SAMBA_CPS_ACCOUNT_NAME.<\/p>\n<li class=\"l\"> CVE-2026-4480 \u2014 vuln\u00e9rabilit\u00e9 dans le serveur d'impression, utilisant l'option \u00ab print command \u00bb avec le symbole de substitution \u00ab %J \u00bb. Le probl\u00e8me est caus\u00e9 par le fait que la description d'impression fournie par l'utilisateur est transmise via la substitution \u00ab %J \u00bb sans un \u00e9chappement appropri\u00e9 des caract\u00e8res sp\u00e9ciaux, permettant d'ex\u00e9cuter \u00e0 distance son propre code lors de l'envoi d'une t\u00e2che d'impression, y compris en mode invit\u00e9 par d\u00e9faut. Comme solution de contournement, on peut supprimer la substitution<br \/>\n\u00ab %J \u00bb de l'option \u00ab print command \u00bb dans smb.conf.<\/p>\n<\/ul>\n<p>Des corrections ont \u00e9galement \u00e9t\u00e9 apport\u00e9es dans les nouvelles versions pour plusieurs autres vuln\u00e9rabilit\u00e9s, permettant de contourner les v\u00e9rifications d'acc\u00e8s aux attributs xattr \u00ab reparse point \u00bb, de r\u00e9\u00e9crire un fichier lors de l'utilisation du module vfs WORM (Write-Once, Read Many), de configurer un certificat via HTTP sans v\u00e9rification et de provoquer un arr\u00eat inattendu. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-los-angeles\/\" title=\"de serveurs\" data-wpil-keyword-link=\"linked\">de serveurs<\/a> AD DC WINS en envoyant un paquet UDP sp\u00e9cialement format\u00e9.<br \/>\n<br \/>Source : <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65545\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.24.3, 4.23.8 \u0438 4.22.10, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SMB \u0438 Active Directory. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0432\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435: CVE-2026-4408 &#8212; \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SAMR (Security Account Manager) \u043f\u043e\u0432\u0435\u0440\u0445 DCE\/RPC, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u0411\u0414 c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181775","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.24.3, 4.23.8 \u0438 4.22.10, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SMB \u0438 Active Directory.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Samba, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0440\u0435\u0434\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.24.3, 4.23.8 \u0438 4.22.10, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SMB \u0438 Active Directory.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-28T00:48:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-28T00:48:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vuln\u00e9rabilit\u00e9s dans Samba permettant l'ex\u00e9cution de code \u00e0 distance dans des configurations rares | ProHoster","description":"Des versions de correction pour Samba 4.24.3, 4.23.8 et 4.22.10 ont \u00e9t\u00e9 publi\u00e9es, fournissant une mise en \u0153uvre open source des protocoles SMB et Active Directory.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Samba, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0440\u0435\u0434\u043a\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u043b\u0438\u0437\u044b \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.24.3, 4.23.8 \u0438 4.22.10, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SMB \u0438 Active Directory.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimosti-v-samba-dopuskayushhie-udalyonnoe-vypolnenie-koda-v-redkih-konfiguracziyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-28T00:48:09+00:00","article:modified_time":"2026-05-28T00:48:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/181775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=181775"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/181775\/revisions"}],"predecessor-version":[{"id":182098,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/181775\/revisions\/182098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=181775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=181775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=181775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}