CVE-2014-3560: NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote atta...

Security readout for executives and security teams

CVE-2014-3560 is a remote code execution vulnerability in Samba's NetBIOS name service daemon, nmbd. If an organization still runs affected Samba 4.0 or 4.1 versions, a remote attacker may be able to compromise that service. The source bundle does not show active exploitation evidence. Exposure is most likely on legacy Linux or Unix systems running Samba 4.0.x or 4.1.x with nmbd enabled and reachable over the network. Current exposure depends on asset age, distribution backports, and whether NetBIOS name service is still in use. Treat this as a legacy exposure cleanup item with high urgency where vulnerable Samba is reachable. It is old, but remote code execution against infrastructure services can still matter on forgotten systems. Prioritize internet-facing, production, and flat-network file service environments. Mitigation focus: Upgrade Samba to 4.0.21, 4.1.11, or a vendor-fixed package.; Apply relevant distribution updates from Fedora, Ubuntu, openSUSE, or your platform vendor.; Restrict network access to nmbd where business use requires it..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.