CVE-2006-1059
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in...
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
Exploit likelihood
What each source reports
NVD Score used
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
CVE-2006-1059- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
CVE-2006-1059- Updated
- 2026-11-02
EUVDEUVD-2006-1063 No score
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
EUVD-2006-1063- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cgxg-c5wj-xpf3 No score
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in...
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
GHSA-cgxg-c5wj-xpf3- Updated
- 2026-11-02
OSV No score
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
CVE-2006-1059- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1059 No score
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Record
DEBIAN-CVE-2006-1059- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10683-1 No score
cifs-utils-6.13-1.3 on GA media
These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10683-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11365-1 No score
ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media
These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11365-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 3.0.22-1 | 3.0.22-1 |
sambaDebian:13 |
before 3.0.22-1 | 3.0.22-1 |
sambaDebian:14 |
before 3.0.22-1 | 3.0.22-1 |
cifs-utilsopenSUSE:Tumbleweed From an advisory covering 16 CVEs |
before 6.13-1.3 | 6.13-1.3 |
sambaopenSUSE:Tumbleweed From an advisory covering 66 CVEs |
before 4.14.6+git.182.2205d5224e3-1.1 | 4.14.6+git.182.2205d5224e3-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1059 is a low vulnerability (CVSS 1.2) in Samba, published March 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in samba 3.0.22-1.
References
secunia.com/advisories/19468
redhat.com/archives/fedora-announce-list/2006-March/msg00114.html
osvdb.org/24263
securityfocus.com/bid/17314
trustix.org/errata/2006/0018
Show 77 moreShow less
vupen.com/english/advisories/2006/1179
securitytracker.com/id?1015850
us1.samba.org/samba/security/CAN-2006-1059.html
exchange.xforce.ibmcloud.com/vulnerabilities/25575
nvd.nist.gov/vuln/detail/CVE-2006-1059
github.com/advisories/GHSA-cgxg-c5wj-xpf3
security-tracker.debian.org/tracker/CVE-2006-1059
suse.com/security/cve/CVE-2006-1059