NVD

Id
40094  
Name
CVE-2013-4496  
Description
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obtain access via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2014-03-14  
Modified Date
2017-01-06  
Seq
2013-4496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203996 40094 CVE-2013-4496 http://advisories.mageia.org/MGASA-2014-0138.html  View
203997 40094 CVE-2013-4496 FEDORA-2014-9132  View
203998 40094 CVE-2013-4496 FEDORA-2014-7672  View
203999 40094 CVE-2013-4496 openSUSE-SU-2016:1106  View
204000 40094 CVE-2013-4496 openSUSE-SU-2016:1107  View
204001 40094 CVE-2013-4496 openSUSE-SU-2014:0404  View
204002 40094 CVE-2013-4496 openSUSE-SU-2014:0405  View
204003 40094 CVE-2013-4496 RHSA-2014:0330  View
204004 40094 CVE-2013-4496 GLSA-201502-15  View
204005 40094 CVE-2013-4496 MDVSA-2015:082  View
204006 40094 CVE-2013-4496 http://www.samba.org/samba/history/samba-3.6.23.html  View
204007 40094 CVE-2013-4496 http://www.samba.org/samba/history/samba-4.0.16.html  View
204008 40094 CVE-2013-4496 http://www.samba.org/samba/history/samba-4.1.6.html  View
204009 40094 CVE-2013-4496 http://www.samba.org/samba/security/CVE-2013-4496  View
204010 40094 CVE-2013-4496 66336  View
204011 40094 CVE-2013-4496 USN-2156-1  View
204012 40094 CVE-2013-4496 https://bugzilla.samba.org/show_bug.cgi?id=10245  View
204013 40094 CVE-2013-4496 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24609 JVNDB-2013-006184 Samba におけるアクセス権を取得される脆弱性 Samba は、パスワード推測保護メカニズムを全てのインターフェースに適用しないため、アクセス権を取得される脆弱性が存在します。 CVE-2013-4496 64438 CVE-2013-4496 40094 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006184.html 2013-06-12 2014-05-14 View