UnratedFix available
samba — security advisory
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
- Products
- samba
- Affected versions
- Not specified
- Fixed versions
- 3.0.22-1
- CVEs
- CVE-2006-1059
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:12 UTC · Revision 1
Source evidence
The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.
osv:DEBIAN-CVE-2006-1059
samba
Fixed versions: 3.0.22-1
samba
Fixed versions: 3.0.22-1
samba
Fixed versions: 3.0.22-1
Complete source record
{
"id": "aa3e11b16dc0016330195a4e40395a892ae0b77e29c44ce4d0dae3f019bb6d66",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2006-1059",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2006-1059",
"summary": "The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain.",
"evidence": "osv:DEBIAN-CVE-2006-1059",
"products": [
{
"name": {
"value": "samba",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.22-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "samba",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.22-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "samba",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.22-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2006-1059",
"aliases": [
"DEBIAN-CVE-2006-1059"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.22-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1059.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.22-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1059.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.22-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1059.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-22T23:47:23.243823463Z",
"provider": "osv",
"upstream": [
"CVE-2006-1059"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2006-1059"
]
},
"related_cves": [
{
"value": "CVE-2006-1059",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410391,
"published_at": "2006-03-30T17:06:00+00:00"
}