Lucene search

K
nvd[email protected]NVD:CVE-2010-0728
HistoryMar 10, 2010 - 8:13 p.m.

CVE-2010-0728

2010-03-1020:13:03
CWE-264
web.nvd.nist.gov
2

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

Affected configurations

NVD
Node
sambasambaMatch3.3.11
OR
sambasambaMatch3.4.6
OR
sambasambaMatch3.5.0

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.2%