NVD

Id
36539  
Name
CVE-2013-0172  
Description
Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-01-17  
Modified Date
2013-01-18  
Seq
2013-0172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186647 36539 CVE-2013-0172 http://www.samba.org/samba/security/CVE-2013-0172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19634 JVNDB-2013-001209 Samba における LDAP ディレクトリオブジェクトの変更上の制限を回避される脆弱性 特定の Active Directory ドメインコントローラ構成における Samba は、objectClass に基づいたアクセス制御エントリを適切に解釈しないため、LDAP ディレクトリオブジェクトの変更上の制限を回避される脆弱性が存在します。 CVE-2013-0172 60114 CVE-2013-0172 36539 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001209.html 2013-01-17 2013-01-22 View