CVE-2013-6442 in Samba

Sumário (Inglês)

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

04/11/2013

Divulgação

14/03/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
12645	Samba smbcacls smbcacls.c owner_set Elevação de Privilégios	264	Não provado	Correção oficial	CVE-2013-6442

Fontes

• MITRE
• NVD
• CVE Details