Endpoint Vulnerability

CVE-2019-14833samba: AD DC check password script does not receive full password when non-ASCII characters are used

Description

A flaw was found in Samba in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.

Affected Products

samba

References

CVE-2019-14833,