Lucene search

[email protected]NVD:CVE-2013-4408

HistoryDec 10, 2013 - 6:14 a.m.

CVE-2013-4408

2013-12-1006:14:55

CWE-119

[email protected]

web.nvd.nist.gov

8.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON

Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.

Affected configurations

NVD

Node

sambasambaMatch4.1.0

sambasambaMatch4.1.1

sambasambaMatch4.1.2

Node

sambasambaMatch4.0.0

sambasambaMatch4.0.1

sambasambaMatch4.0.2

sambasambaMatch4.0.3

sambasambaMatch4.0.4

sambasambaMatch4.0.5

sambasambaMatch4.0.6

sambasambaMatch4.0.7

sambasambaMatch4.0.8

sambasambaMatch4.0.9

sambasambaMatch4.0.10

sambasambaMatch4.0.11

sambasambaMatch4.0.12

Node

sambasambaMatch3.0.0

sambasambaMatch3.0.1

sambasambaMatch3.0.2

sambasambaMatch3.0.2a

sambasambaMatch3.0.3

sambasambaMatch3.0.4

sambasambaMatch3.0.4rc1

sambasambaMatch3.0.5

sambasambaMatch3.0.6

sambasambaMatch3.0.7

sambasambaMatch3.0.8

sambasambaMatch3.0.9

sambasambaMatch3.0.10

sambasambaMatch3.0.11

sambasambaMatch3.0.12

sambasambaMatch3.0.13

sambasambaMatch3.0.14

sambasambaMatch3.0.14a

sambasambaMatch3.0.15

sambasambaMatch3.0.16

sambasambaMatch3.0.17

sambasambaMatch3.0.18

sambasambaMatch3.0.19

sambasambaMatch3.0.20

sambasambaMatch3.0.20a

sambasambaMatch3.0.20b

sambasambaMatch3.0.20a

sambasambaMatch3.0.20b

sambasambaMatch3.0.21

sambasambaMatch3.0.21a

sambasambaMatch3.0.21b

sambasambaMatch3.0.21c

sambasambaMatch3.0.21a

sambasambaMatch3.0.21b

sambasambaMatch3.0.21c

sambasambaMatch3.0.22

sambasambaMatch3.0.23

sambasambaMatch3.0.23a

sambasambaMatch3.0.23b

sambasambaMatch3.0.23c

sambasambaMatch3.0.23d

sambasambaMatch3.0.23a

sambasambaMatch3.0.23b

sambasambaMatch3.0.23c

sambasambaMatch3.0.23d

sambasambaMatch3.0.24

sambasambaMatch3.0.25

sambasambaMatch3.0.25a

sambasambaMatch3.0.25b

sambasambaMatch3.0.25c

sambasambaMatch3.0.25pre1

sambasambaMatch3.0.25pre2

sambasambaMatch3.0.25rc1

sambasambaMatch3.0.25rc2

sambasambaMatch3.0.25rc3

sambasambaMatch3.0.25a

sambasambaMatch3.0.25b

sambasambaMatch3.0.25c

sambasambaMatch3.0.26

sambasambaMatch3.0.26a

sambasambaMatch3.0.27

sambasambaMatch3.0.27a

sambasambaMatch3.0.28

sambasambaMatch3.0.28a

sambasambaMatch3.0.29

sambasambaMatch3.0.30

sambasambaMatch3.0.31

sambasambaMatch3.0.32

sambasambaMatch3.0.33

sambasambaMatch3.0.34

sambasambaMatch3.0.35

sambasambaMatch3.0.36

sambasambaMatch3.0.37

sambasambaMatch3.1.0

sambasambaMatch3.2.0

sambasambaMatch3.2.1

sambasambaMatch3.2.2

sambasambaMatch3.2.3

sambasambaMatch3.2.4

sambasambaMatch3.2.5

sambasambaMatch3.2.6

sambasambaMatch3.2.7

sambasambaMatch3.2.8

sambasambaMatch3.2.9

sambasambaMatch3.2.10

sambasambaMatch3.2.11

sambasambaMatch3.2.12

sambasambaMatch3.2.13

sambasambaMatch3.2.14

sambasambaMatch3.2.15

sambasambaMatch3.3.0

sambasambaMatch3.3.1

sambasambaMatch3.3.2

sambasambaMatch3.3.3

sambasambaMatch3.3.4

sambasambaMatch3.3.5

sambasambaMatch3.3.6

sambasambaMatch3.3.7

sambasambaMatch3.3.8

sambasambaMatch3.3.9

sambasambaMatch3.3.10

sambasambaMatch3.3.11

sambasambaMatch3.3.12

sambasambaMatch3.3.13

sambasambaMatch3.3.14

sambasambaMatch3.3.15

sambasambaMatch3.3.16

sambasambaMatch3.4.0

sambasambaMatch3.4.1

sambasambaMatch3.4.2

sambasambaMatch3.4.3

sambasambaMatch3.4.4

sambasambaMatch3.4.5

sambasambaMatch3.4.6

sambasambaMatch3.4.7

sambasambaMatch3.4.8

sambasambaMatch3.4.9

sambasambaMatch3.4.10

sambasambaMatch3.4.11

sambasambaMatch3.4.12

sambasambaMatch3.4.13

sambasambaMatch3.4.14

sambasambaMatch3.4.15

sambasambaMatch3.4.16

sambasambaMatch3.4.17

sambasambaMatch3.5.0

sambasambaMatch3.5.1

sambasambaMatch3.5.2

sambasambaMatch3.5.3

sambasambaMatch3.5.4

sambasambaMatch3.5.5

sambasambaMatch3.5.6

sambasambaMatch3.5.7

sambasambaMatch3.5.8

sambasambaMatch3.5.9

sambasambaMatch3.5.10

sambasambaMatch3.5.11

sambasambaMatch3.5.12

sambasambaMatch3.5.13

sambasambaMatch3.5.14

sambasambaMatch3.5.15

sambasambaMatch3.5.16

sambasambaMatch3.5.17

sambasambaMatch3.5.18

sambasambaMatch3.5.19

sambasambaMatch3.5.20

sambasambaMatch3.5.21

sambasambaMatch3.6.0

sambasambaMatch3.6.1

sambasambaMatch3.6.2

sambasambaMatch3.6.3

sambasambaMatch3.6.4

sambasambaMatch3.6.5

sambasambaMatch3.6.6

sambasambaMatch3.6.7

sambasambaMatch3.6.8

sambasambaMatch3.6.9

sambasambaMatch3.6.10

sambasambaMatch3.6.11

sambasambaMatch3.6.12

sambasambaMatch3.6.13

sambasambaMatch3.6.14

sambasambaMatch3.6.15

sambasambaMatch3.6.16

sambasambaMatch3.6.17

sambasambaMatch3.6.18

sambasambaMatch3.6.19

sambasambaMatch3.6.20

sambasambaMatch3.6.21

References

lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html

lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html

lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html

lists.opensuse.org/opensuse-updates/2013-12/msg00088.html

lists.opensuse.org/opensuse-updates/2014-03/msg00063.html

marc.info/?l=bugtraq&m=141660010015249&w=2

rhn.redhat.com/errata/RHSA-2013-1805.html

rhn.redhat.com/errata/RHSA-2013-1806.html

rhn.redhat.com/errata/RHSA-2014-0009.html

security.gentoo.org/glsa/glsa-201502-15.xml

www.debian.org/security/2013/dsa-2812

www.mandriva.com/security/advisories?name=MDVSA-2013:299

www.samba.org/samba/ftp/patches/security/samba-4.1.2-CVE-2013-4408-CVE-2012-6150.patch

www.samba.org/samba/security/CVE-2013-4408

www.securityfocus.com/bid/64191

www.ubuntu.com/usn/USN-2054-1

8.3 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.6%

JSON

Related for NVD:CVE-2013-4408

cve1 ubuntucve1 veracode2 prion1 nessus27 centos2 samba1 openvas37 redhat3 oraclelinux3 debiancve1 cvelist1 slackware1 ibm2 debian1 mageia1 securityvulns1 fedora9 altlinux3 osv1 freebsd1 ubuntu1 suse3 gentoo1