CVE

Id
60401  
CVE No.
CVE-2013-0454  
Status
Candidate  
Description
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.  
Phase
Assigned (20121216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
609970 60401 CVE-2013-0454 MLIST:[samba-announce] 20120625 [Announce] Samba 3.6.6 Available for Download  View
609971 60401 CVE-2013-0454 URL:https://lists.samba.org/archive/samba-announce/2012/000259.html  View
609972 60401 CVE-2013-0454 MISC:https://bugzilla.samba.org/show_bug.cgi?id=8738  View
609973 60401 CVE-2013-0454 CONFIRM:http://www.ibm.com/support/docview.wss?uid=ssg1S1004289  View
609974 60401 CVE-2013-0454 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=928419  View
609975 60401 CVE-2013-0454 CONFIRM:https://www.samba.org/samba/security/CVE-2013-0454  View
609976 60401 CVE-2013-0454 UBUNTU:USN-1802-1  View
609977 60401 CVE-2013-0454 URL:http://www.ubuntu.com/usn/USN-1802-1  View
609978 60401 CVE-2013-0454 XF:storwize-cifs-incorrect-permissions(80970)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19702 JVNDB-2013-001277 IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 IBM WebSphere Application Server (WAS) の管理コンソールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0459 60401 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001277.html  View