CVE-2013-4475
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2013-4475
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-4475.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-4475
- Related
- Published
- 2013-11-13T15:55:03Z
- Modified
- 2024-06-30T12:00:03Z
- Summary
- [none]
- Details
-
Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfsstreamsdepot or vfsstreamsxattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
- References
-
- http://rhn.redhat.com/errata/RHSA-2013-1806.html
- http://rhn.redhat.com/errata/RHSA-2014-0009.html
- http://secunia.com/advisories/56508
- http://security.gentoo.org/glsa/glsa-201502-15.xml
- http://www.debian.org/security/2013/dsa-2812
- http://www.samba.org/samba/history/samba-3.6.20.html
- http://www.samba.org/samba/history/samba-4.0.11.html
- http://www.samba.org/samba/history/samba-4.1.1.html
- http://www.samba.org/samba/security/CVE-2013-4475
- http://www.securityfocus.com/bid/63646
- http://www.ubuntu.com/usn/USN-2054-1
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
- http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00083.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00115.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00117.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html
- https://blogs.oracle.com/sunsecurity/entry/cve_2013_4475_access_control
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
- https://security-tracker.debian.org/tracker/CVE-2013-4475
Affected packages
Debian:11 / samba
Package
- Name
- samba
- Purl
- pkg:deb/debian/samba?arch=source
Debian:12 / samba
Package
- Name
- samba
- Purl
- pkg:deb/debian/samba?arch=source
Debian:13 / samba
Package
- Name
- samba
- Purl
- pkg:deb/debian/samba?arch=source