NVD

Id
41498  
Name
CVE-2013-6442  
Description
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-03-14  
Modified Date
2017-01-06  
Seq
2013-6442  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209714 41498 CVE-2013-6442 FEDORA-2014-9132  View
209715 41498 CVE-2013-6442 FEDORA-2014-7672  View
209716 41498 CVE-2013-6442 openSUSE-SU-2014:0404  View
209717 41498 CVE-2013-6442 http://www.samba.org/samba/history/samba-4.0.16.html  View
209718 41498 CVE-2013-6442 http://www.samba.org/samba/history/samba-4.1.6.html  View
209719 41498 CVE-2013-6442 http://www.samba.org/samba/security/CVE-2013-6442  View
209720 41498 CVE-2013-6442 66232  View
209721 41498 CVE-2013-6442 https://bugzilla.samba.org/show_bug.cgi?id=10327  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24610 JVNDB-2013-006185 Samba の smbcacls の smbcacls.c 内の owner_set 関数におけるアクセス制限を回避される脆弱性 Samba の smbcacls の smbcacls.c 内の owner_set 関数は、--chown または --chgrp オプションの使用時に ACL を削除するため、アクセス制限を回避される脆弱性が存在します。 CVE-2013-6442 66384 CVE-2013-6442 41498 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006185.html 2013-11-04 2014-03-17 View