CVE-2013-0454 — Samba vulnerability
Severity
4.0MEDIUMNVD
EPSS
1.9%
top 16.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 26
Latest updateMay 5
Description
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" para…
CVSS vector
AV:N/AC:L/C:N/I:P/A:NExploitability: 8.0 | Impact: 2.9
Affected Packages4 packages
Also affects: Ubuntu Linux 12.04