CVE-2007-2407

2007-08-0310:17:00

mitre

web.nvd.nist.gov

samba

apple

mac os x

cve-2007-2407

disk quotas

nvd

remote authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

5.8

Confidence

Low

EPSS

0.01

Percentile

83.6%

JSON

The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.

Affected configurations

Nvd

Node

applemac_os_xMatch10.3.9

applemac_os_xMatch10.4.10

applemac_os_x_serverMatch10.3.9

applemac_os_x_serverMatch10.4.10

AND

sambasamba_server

VendorProductVersionCPE
applemac_os_x10.3.9cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*
applemac_os_x10.4.10cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*
applemac_os_x_server10.3.9cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*
applemac_os_x_server10.4.10cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*
sambasamba_server*cpe:2.3:a:samba:samba_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.3.9	cpe:2.3:o:apple:mac_os_x:10.3.9:::::::*
apple	mac_os_x	10.4.10	cpe:2.3:o:apple:mac_os_x:10.4.10:::::::*
apple	mac_os_x_server	10.3.9	cpe:2.3:o:apple:mac_os_x_server:10.3.9:::::::*
apple	mac_os_x_server	10.4.10	cpe:2.3:o:apple:mac_os_x_server:10.4.10:::::::*
samba	samba_server	*	cpe:2.3:a:samba:samba_server::::::::