Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4475
HistoryNov 13, 2013 - 3:55 p.m.

CVE-2013-4475

2013-11-1315:55:03
CWE-264
[email protected]
web.nvd.nist.gov
7

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

74.2%

JSON

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Affected configurations

Nvd
Node
sambasambaRange3.2.0–3.6.20
OR
sambasambaRange4.0.0–4.0.11
OR
sambasambaMatch4.1.0
Node
debiandebian_linuxMatch6.0
OR
debiandebian_linuxMatch7.0
Node
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch12.04-
OR
canonicalubuntu_linuxMatch12.10
OR
canonicalubuntu_linuxMatch13.04
OR
canonicalubuntu_linuxMatch13.10
VendorProductVersionCPE
sambasamba*cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
sambasamba4.1.0cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:*
debiandebian_linux6.0cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
debiandebian_linux7.0cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
canonicalubuntu_linux10.04cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
canonicalubuntu_linux12.10cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
canonicalubuntu_linux13.04cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
canonicalubuntu_linux13.10cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

References

Related

nessus 25
ubuntucve 1
openvas 28
debiancve 1
securityvulns 3
freebsd 1
mageia 1
cvelist 1
f5 2
prion 1
samba 1
fedora 7
cve 1
centos 1
osv 1
veracode 1
debian 1
oraclelinux 1
redhat 2
altlinux 3
slackware 1
suse 1
ubuntu 1
gentoo 1
nessus
nessus
Fedora 19 : samba-4.0.11-1.fc19 (2013-21094)
2013-11-21 00:00:00
Fedora 20 : samba-4.1.1-1.fc20 (2013-21088)
2013-11-26 00:00:00
openSUSE Security Update : samba (openSUSE-SU-2013:1787-1)
2014-06-13 00:00:00
ubuntucve
ubuntucve
CVE-2013-4475
2013-11-13 00:00:00
openvas
openvas
Samba >= 3.2.0 Bypass File Restriction Vulnerability (CVE-2013-4475)
2021-09-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0839-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2013-0348)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2013-4475
2013-11-13 15:55:03
securityvulns
securityvulns
Samba protection bypass
2013-11-26 00:00:00
[ MDVSA-2013:278 ] samba
2013-11-26 00:00:00
Samba buffer overflow
2014-01-08 00:00:00
freebsd
freebsd
samba -- ACLs are not checked on opening an alternate data stream on a file or directory
2013-06-12 00:00:00
mageia
mageia
Updated samba packages fix CVE-2013-4475
2013-11-22 23:10:41
cvelist
cvelist
CVE-2013-4475
2013-11-13 15:00:00
f5
f5
SOL15874 - Samba vulnerability CVE-2013-4475
2014-12-01 00:00:00
K15874 : Samba vulnerability CVE-2013-4475
2014-12-02 00:00:00
prion
prion
Design/Logic Flaw
2013-11-13 15:55:00
samba
samba
ACLs are not checked on opening an alternate
2013-11-11 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: samba-4.1.1-1.fc20
2013-11-26 04:10:12
[SECURITY] Fedora 19 Update: samba-4.0.11-1.fc19
2013-11-21 04:37:11
[SECURITY] Fedora 19 Update: samba-4.0.13-1.fc19
2013-12-15 03:35:27
cve
cve
CVE-2013-4475
2013-11-13 15:55:03
centos
centos
libsmbclient, samba, samba3x security update
2013-12-10 01:03:24
osv
osv
samba - several
2013-12-09 00:00:00
veracode
veracode
Privilege Escalation
2019-05-02 05:00:33
debian
debian
[SECURITY] [DSA 2812-1] samba security update
2013-12-09 10:13:23
oraclelinux
oraclelinux
samba and samba3x security update
2013-12-09 00:00:00
redhat
redhat
(RHSA-2014:0009) Important: samba security update
2014-01-06 00:00:00
(RHSA-2013:1806) Important: samba and samba3x security update
2013-12-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.0.11-alt1
2013-11-12 00:00:00
Security fix for the ALT Linux 8 package samba version 4.0.11-alt1
2013-11-12 00:00:00
Security fix for the ALT Linux 10 package samba version 4.0.11-alt1
2013-11-12 00:00:00
slackware
slackware
[slackware-security] samba
2013-11-19 01:51:01
suse
suse
Security update for Samba (important)
2014-01-07 00:04:36
ubuntu
ubuntu
Samba vulnerabilities
2013-12-11 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2015-02-25 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

74.2%

JSON
Related for NVD:CVE-2013-4475
nessus25ubuntucve1openvas28debiancve1securityvulns3freebsd1mageia1cvelist1f52prion1samba1fedora7cve1centos1osv1veracode1debian1oraclelinux1redhat2altlinux3slackware1suse1ubuntu1gentoo1