CVE-2013-6442

samba: smbcacls will delete ACL lists in certain circumstances

Severity Score

5.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

La función owner_set en smbcacls.c en smbcacls en Samba 4.0.x anterior a 4.0.16 y 4.1.x anterior a 4.1.6 elimina una ACL durante el uso de una opción de --chown o --chgrp, lo que permite a atacantes remotos evadir restricciones de acceso en circunstancias oportunistas mediante el aprovechamiento de un cambio de administrativo no intencionado.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

Attack Vector

Adjacent

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-11-04 CVE Reserved
2014-03-14 CVE Published
2024-01-25 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (10)

URL	Tag	Source
http://www.samba.org/samba/history/samba-4.0.16.html	X_refsource_confirm
http://www.samba.org/samba/history/samba-4.1.6.html	X_refsource_confirm
http://www.samba.org/samba/security/CVE-2013-6442	X_refsource_confirm
http://www.securityfocus.com/bid/66232	Vdb Entry
https://bugzilla.samba.org/show_bug.cgi?id=10327	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html	2017-01-07
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html	2017-01-07
http://lists.opensuse.org/opensuse-updates/2014-03/msg00062.html	2017-01-07
https://access.redhat.com/security/cve/CVE-2013-6442	2014-04-09
https://bugzilla.redhat.com/show_bug.cgi?id=1044099	2014-04-09

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.0 Search vendor "Samba" for product "Samba" and version "4.1.0"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.1 Search vendor "Samba" for product "Samba" and version "4.1.1"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.2 Search vendor "Samba" for product "Samba" and version "4.1.2"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.3 Search vendor "Samba" for product "Samba" and version "4.1.3"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.4 Search vendor "Samba" for product "Samba" and version "4.1.4"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.1.5 Search vendor "Samba" for product "Samba" and version "4.1.5"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.0 Search vendor "Samba" for product "Samba" and version "4.0.0"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.1 Search vendor "Samba" for product "Samba" and version "4.0.1"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.2 Search vendor "Samba" for product "Samba" and version "4.0.2"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.3 Search vendor "Samba" for product "Samba" and version "4.0.3"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.4 Search vendor "Samba" for product "Samba" and version "4.0.4"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.5 Search vendor "Samba" for product "Samba" and version "4.0.5"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.6 Search vendor "Samba" for product "Samba" and version "4.0.6"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.7 Search vendor "Samba" for product "Samba" and version "4.0.7"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.8 Search vendor "Samba" for product "Samba" and version "4.0.8"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.9 Search vendor "Samba" for product "Samba" and version "4.0.9"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.10 Search vendor "Samba" for product "Samba" and version "4.0.10"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.11 Search vendor "Samba" for product "Samba" and version "4.0.11"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.12 Search vendor "Samba" for product "Samba" and version "4.0.12"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.13 Search vendor "Samba" for product "Samba" and version "4.0.13"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.14 Search vendor "Samba" for product "Samba" and version "4.0.14"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				4.0.15 Search vendor "Samba" for product "Samba" and version "4.0.15"		-		Affected