CVE-2013-4476 in Samba정보

요약 (영어)

Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller.

예약하다

2013. 06. 12.

공개

2013. 11. 13.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
11174	Samba Private Key Encryption 약한 암호화	310	정의되지 않음	공식 수정	CVE-2013-4476

설명

CPE

CWE

CVSS

익스플로잇

역사

차이

연결하다

위협 인텔리전스

API JSON

API XML

API CSV

◂ 이전개요다음 ▸

Interested in the pricing of exploits?

See the underground prices here!