Samba vulnerability

2013-04-1600:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

52.3%

JSON

Releases

Ubuntu 12.04

Packages

samba - SMB/CIFS file, print, and login server for Unix

Details

It was discovered that Samba incorrectly handled CIFS share attributes when
SMB2 was used. A remote authenticated user could possibly gain write access
to certain shares, bypassing the intended permissions.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchsamba< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibpam-smbpass< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibpam-winbind< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibsmbclient< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibsmbclient-dev< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibwbclient-dev< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchlibwbclient0< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchsamba-common-bin< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchsamba-dbg< 2:3.6.3-2ubuntu2.6UNKNOWN
Ubuntu12.04noarchsamba-tools< 2:3.6.3-2ubuntu2.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	samba	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libpam-smbpass	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libpam-winbind	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libsmbclient	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libsmbclient-dev	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libwbclient-dev	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	libwbclient0	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	samba-common-bin	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	samba-dbg	< 2:3.6.3-2ubuntu2.6	UNKNOWN
Ubuntu	12.04	noarch	samba-tools	< 2:3.6.3-2ubuntu2.6	UNKNOWN