[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-1863Date: (C)2013-03-19   (M)2023-12-22


Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.0
Exploit Score: 6.8
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://www.samba.org/samba/ftp/patches/security/samba-4.0.3-CVE-2013-1863.patch
http://www.samba.org/samba/security/CVE-2013-1863

CPE    4
cpe:/a:samba:samba:4.0.2
cpe:/a:samba:samba:4.0.3
cpe:/a:samba:samba:4.0.0
cpe:/a:samba:samba:4.0.1
...
CWE    1
CWE-264

© SecPod Technologies