CVE-2007-2407

2007-08-0310:17:00

Debian Security Bug Tracker

security-tracker.debian.org

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.015 Low

EPSS

Percentile

86.6%

JSON

The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.

OSVersionArchitecturePackageVersionFilename
Debian12allsamba< 2:4.17.12+dfsg-0+deb12u1samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian11allsamba< 2:4.13.13+dfsg-1~deb11u5samba_2:4.13.13+dfsg-1~deb11u5_all.deb
Debian10allsamba< 2:4.9.5+dfsg-5+deb10u3samba_2:4.9.5+dfsg-5+deb10u3_all.deb
Debian999allsamba< 2:4.19.6+dfsg-3samba_2:4.19.6+dfsg-3_all.deb
Debian13allsamba< 2:4.19.6+dfsg-1samba_2:4.19.6+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	samba	< 2:4.17.12+dfsg-0+deb12u1	samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian	11	all	samba	< 2:4.13.13+dfsg-1~deb11u5	samba_2:4.13.13+dfsg-1~deb11u5_all.deb
Debian	10	all	samba	< 2:4.9.5+dfsg-5+deb10u3	samba_2:4.9.5+dfsg-5+deb10u3_all.deb
Debian	999	all	samba	< 2:4.19.6+dfsg-3	samba_2:4.19.6+dfsg-3_all.deb
Debian	13	all	samba	< 2:4.19.6+dfsg-1	samba_2:4.19.6+dfsg-1_all.deb