CVE Vulnerabilities

CVE-2013-6442

Published: Mar 14, 2014 | Modified: Jan 07, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
4.1 MODERATE
AV:A/AC:L/Au:S/C:P/I:P/A:N
RedHat/V3
Ubuntu
MEDIUM

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a –chown or –chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

Affected Software

Name Vendor Start Version End Version
Samba Samba 4.1.0 (including) 4.1.0 (including)
Samba Samba 4.1.1 (including) 4.1.1 (including)
Samba Samba 4.1.2 (including) 4.1.2 (including)
Samba Samba 4.1.3 (including) 4.1.3 (including)
Samba Samba 4.1.4 (including) 4.1.4 (including)
Samba Samba 4.1.5 (including) 4.1.5 (including)
Red Hat Enterprise Linux 6 RedHat samba4-0:4.0.0-61.el6_5.rc4 *
Samba Ubuntu devel *
Samba Ubuntu esm-infra/xenial *
Samba Ubuntu trusty *
Samba Ubuntu trusty/esm *
Samba Ubuntu upstream *
Samba Ubuntu utopic *
Samba Ubuntu vivid *
Samba Ubuntu wily *
Samba Ubuntu xenial *
Samba Ubuntu yakkety *
Samba Ubuntu zesty *
Samba4 Ubuntu lucid *
Samba4 Ubuntu precise *
Samba4 Ubuntu quantal *
Samba4 Ubuntu saucy *
Samba4 Ubuntu upstream *

References