Rapid7 Vulnerability & Exploit Database

USN-1802-1: Samba vulnerability

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

USN-1802-1: Samba vulnerability

Severity

CVSS

(AV:N/AC:L/Au:S/C:N/I:P/A:N)

Published

03/26/2013

Created

07/25/2018

Added

05/06/2013

Modified

07/09/2020

Description

The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.

Solution(s)

ubuntu-upgrade-samba

References

https://attackerkb.com/topics/cve-2013-0454
CVE - 2013-0454
USN-1802-1
80970

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;