Samba 'key.pem' Local Insecure File Permissions Vulnerability

Bugtraq ID:	63649
Class:	Design Error
CVE:	CVE-2013-4476
Remote:	No
Local:	Yes
Published:	Nov 11 2013 12:00AM
Updated:	Apr 17 2014 12:52AM
Credit:	Stefan Metzmacher and Björn Baumbach of SerNet
Vulnerable:	HP NonStop Server J06.13 HP NonStop Server J06.12.00 HP NonStop Server J06.11.00 HP NonStop Server J06.10.00 HP NonStop Server H06.24 HP NonStop Server H06.23 HP NonStop Server H06.22.00 HP NonStop Server H06.21.00 HP NonStop Server H06.20.00 HP NonStop Server H06.19.00 HP NonStop Server H06.18.00 HP NonStop Server H06.17.00 HP NonStop Server H06.16.00 HP NonStop Server H06.15.00
Not Vulnerable:

Samba 'key.pem' Local Insecure File Permissions Vulnerability

Samba is prone to a local insecure-file-permissions vulnerability.

A local attacker can exploit this issue by gaining access to a world-readable file and extracting sensitive information from it. Information obtained may aid in other attacks.

Versions prior to Samba 4.0.11 and 4.1.1 are vulnerable.

Samba 'key.pem' Local Insecure File Permissions Vulnerability

An attacker can exploit this issue using readily available tools.

Samba 'key.pem' Local Insecure File Permissions Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Samba 'key.pem' Local Insecure File Permissions Vulnerability

References:

• Samba Homepage (Samba)
  
• Samba Security Releases (Samba)