Lucene search

K
osvGoogleOSV:DSA-2812-1
HistoryDec 09, 2013 - 12:00 a.m.

samba - several

2013-12-0900:00:00
Google
osv.dev
6

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

77.9%

Two security issues were found in Samba, a SMB/CIFS file, print, and
login server:

  • CVE-2013-4408
    It was discovered that multiple buffer overflows in the processing
    of DCE-RPC packets may lead to the execution of arbitrary code.
  • CVE-2013-4475
    Hemanth Thummala discovered that ACLs were not checked when opening
    files with alternate data streams. This issue is only exploitable
    if the VFS modules vfs_streams_depot and/or vfs_streams_xattr are
    used.

For the oldstable distribution (squeeze), these problems have been fixed in
version 3.5.6~dfsg-3squeeze11.

For the stable distribution (wheezy), these problems have been fixed in
version 3.6.6-6+deb7u2.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your samba packages.

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

77.9%