The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 26, 2013 |
| Samba | — | Upgrade to Samba version 3.6.6 | Nov 13, 2013 | Mar 26, 2013 |
| Suse | — | Upgrade libwbclient0-32bitUpgrade libsmbsharemodes-develUpgrade samba-client-debuginfo-x86Upgrade libldb1-debuginfoUpgrade libtevent0-32bitUpgrade libldb1-x86Upgrade libtalloc2Upgrade libtalloc2-debuginfo-32bitUpgrade samba-debuginfo-x86Upgrade libwbclient0-debuginfo-x86Upgrade libtdb-develUpgrade samba-winbind-debuginfo-x86Upgrade libtdb1-x86Upgrade libtdb1-debuginfo-x86Upgrade samba-client-32bitUpgrade samba-winbind-x86Upgrade samba-debuginfo-32bitUpgrade libtdb1-debuginfoUpgrade libldb1Upgrade libtdb1-debuginfo-32bitUpgrade libtdb1-32bitUpgrade samba-debugsourceUpgrade libsmbclient0-debuginfo-x86Upgrade libtalloc2-debuginfoUpgrade libsmbclient0-x86Upgrade libnetapi-develUpgrade libsmbclient0-debuginfoUpgrade samba-krb-printingUpgrade samba-32bitUpgrade libnetapi0-debuginfoUpgrade libtalloc2-debuginfo-x86Upgrade libwbclient-develUpgrade libwbclient0-x86Upgrade samba-debuginfoUpgrade libsmbclient0Upgrade samba-client-debuginfo-32bitUpgrade libldb1-debuginfo-32bitUpgrade libtevent0Upgrade samba-winbind-debuginfo-32bitUpgrade ldapsmbUpgrade libsmbclient0-32bitUpgrade samba-winbind-32bitUpgrade samba-client-debuginfoUpgrade samba-x86Upgrade libldb1-32bitUpgrade libtevent-develUpgrade samba-docUpgrade libldb-develUpgrade libtevent0-x86Upgrade samba-clientUpgrade libtevent0-debuginfo-32bitUpgrade sambaUpgrade samba-winbindUpgrade libsmbclient-develUpgrade libnetapi0Upgrade libwbclient0-debuginfo-32bitUpgrade samba-develUpgrade libtalloc2-32bitUpgrade libtevent0-debuginfoUpgrade libsmbsharemodes0Upgrade libsmbsharemodes0-debuginfoUpgrade libwbclient0-debuginfoUpgrade libldb1-debuginfo-x86Upgrade libtalloc-develUpgrade libwbclient0Upgrade samba-krb-printing-debuginfoUpgrade libtalloc2-x86Upgrade libtevent0-debuginfo-x86Upgrade samba-client-x86Upgrade libtdb1Upgrade libsmbclient0-debuginfo-32bitUpgrade samba-winbind-debuginfo | Dec 12, 2013 | Mar 26, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 26, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub