Samba Active Directory Domain Controller Access Control Vulnerability

A vulnerability has been identified in Samba. A remote authenticated user can gain write access to certain objects in the target directory.

1. A remote authenticated user can send specially crafted data to trigger a buffer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.
2. A remote authenticated user that has Active Directory access to an object based on the objectClass of the object is granted write access to the target object.
3. A remote authenticated user with write access to any attribute of the target object may be granted write access to all attributes of the target object.