CVE-2013-6442 in Samba
Résumé (Anglaise)
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Réserver
04/11/2013
Divulgation
14/03/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 12645 | Samba smbcacls smbcacls.c owner_set élévation de privilèges | 264 | Non prouvée | Correctif officiel | CVE-2013-6442 |