Lucene search

K
f5F5F5:K15642
HistoryOct 02, 2014 - 12:00 a.m.

K15642 : Samba vulnerability CVE-2013-4476

2014-10-0200:00:00
my.f5.com
18

AI Score

5.5

Confidence

Low

EPSS

0.001

Percentile

25.3%

Security Advisory Description

Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controller.
(
CVE-2013-4476
)
Impact
None. F5 products are not affected by this vulnerability.