Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-0728
HistoryMar 10, 2010 - 12:00 a.m.

CVE-2010-0728

2010-03-1000:00:00
ubuntu.com
ubuntu.com
10

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.5%

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled,
runs with the CAP_DAC_OVERRIDE capability, which allows remote
authenticated users to bypass intended file permissions via standard
filesystem operations with any client.

Bugs

Notes

Author Note
mdeslaur new code introduced in 3.4.6

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

72.5%