Lucene search

K
cve[email protected]CVE-2013-1863
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1863

2022-10-0316:14:48
CWE-264
web.nvd.nist.gov
22
samba
cve-2013-1863
active directory
file permissions
security issues

6.5 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.7%

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.

Affected configurations

NVD
Node
sambasambaMatch4.0.0
OR
sambasambaMatch4.0.1
OR
sambasambaMatch4.0.2
OR
sambasambaMatch4.0.3

6.5 Medium

AI Score

Confidence

Low

6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.7%