CVE-2007-2407

2007-08-0310:17:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.01

Percentile

83.6%

JSON

The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.

OSVersionArchitecturePackageVersionFilename
Debian12allsamba< 2:4.17.12+dfsg-0+deb12u1samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian11allsamba< 2:4.13.13+dfsg-1~deb11u6samba_2:4.13.13+dfsg-1~deb11u6_all.deb
Debian999allsamba< 2:4.21.0+dfsg-1samba_2:4.21.0+dfsg-1_all.deb
Debian13allsamba< 2:4.21.0+dfsg-1samba_2:4.21.0+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	samba	< 2:4.17.12+dfsg-0+deb12u1	samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian	11	all	samba	< 2:4.13.13+dfsg-1~deb11u6	samba_2:4.13.13+dfsg-1~deb11u6_all.deb
Debian	999	all	samba	< 2:4.21.0+dfsg-1	samba_2:4.21.0+dfsg-1_all.deb
Debian	13	all	samba	< 2:4.21.0+dfsg-1	samba_2:4.21.0+dfsg-1_all.deb