NVD

Id
40075  
Name
CVE-2013-4475  
Description
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-11-13  
Modified Date
2017-01-06  
Seq
2013-4475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203893 40075 CVE-2013-4475 FEDORA-2014-9132  View
203894 40075 CVE-2013-4475 SUSE-SU-2014:0024  View
203895 40075 CVE-2013-4475 openSUSE-SU-2013:1742  View
203896 40075 CVE-2013-4475 openSUSE-SU-2013:1787  View
203897 40075 CVE-2013-4475 openSUSE-SU-2013:1790  View
203898 40075 CVE-2013-4475 openSUSE-SU-2013:1921  View
203899 40075 CVE-2013-4475 RHSA-2013:1806  View
203900 40075 CVE-2013-4475 RHSA-2014:0009  View
203901 40075 CVE-2013-4475 GLSA-201502-15  View
203902 40075 CVE-2013-4475 DSA-2812  View
203903 40075 CVE-2013-4475 http://www.samba.org/samba/history/samba-3.6.20.html  View
203904 40075 CVE-2013-4475 http://www.samba.org/samba/history/samba-4.0.11.html  View
203905 40075 CVE-2013-4475 http://www.samba.org/samba/history/samba-4.1.1.html  View
203906 40075 CVE-2013-4475 http://www.samba.org/samba/security/CVE-2013-4475  View
203907 40075 CVE-2013-4475 63646  View
203908 40075 CVE-2013-4475 USN-2054-1  View
203909 40075 CVE-2013-4475 https://blogs.oracle.com/sunsecurity/entry/cve_2013_4475_access_control  View
203910 40075 CVE-2013-4475 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23523 JVNDB-2013-005098 Samba におけるファイルの制限を回避される脆弱性 Samba には、vfs_streams_depot または vfs_streams_xattr が有効な場合、ファイルの制限を回避される脆弱性が存在します。 CVE-2013-4475 64417 CVE-2013-4475 40075 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005098.html 2013-11-11 2015-08-07 View