Samba 'smbcacls' Command Security Bypass Vulnerability
BID:66232
Info
Samba 'smbcacls' Command Security Bypass Vulnerability
| Bugtraq ID: | 66232 |
| Class: | Design Error |
| CVE: |
CVE-2013-6442 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 14 2014 12:00AM |
| Updated: | Apr 13 2015 09:56PM |
| Credit: | Noel Power of SuSE |
| Vulnerable: |
Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 Samba Samba 4.1.3 Samba Samba 4.1.2 Samba Samba 4.1.1 Samba Samba 4.1 Samba Samba 4.0.13 Samba Samba 4.0.12 Samba Samba 4.0.10 Samba Samba 4.0.2 Samba Samba 4.0.9 Samba Samba 4.0.8 Samba Samba 4.0.7 Samba Samba 4.0.6 Samba Samba 4.0.5 Samba Samba 4.0.4 Samba Samba 4.0.3 Samba Samba 4.0.11 Samba Samba 4.0.1 Samba Samba 4.0.0tp5 Samba Samba 4.0.0 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 CentOS CentOS 6 |
| Not Vulnerable: |
Samba Samba 4.1.6 Samba Samba 4.0.16 |
Discussion
Samba 'smbcacls' Command Security Bypass Vulnerability
Samba is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass access control lists (ACLs) and gain access to restricted resources. This may aid in further attacks.
Versions prior to Samba 4.0.16 and 4.1.6 are vulnerable.
Samba is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass access control lists (ACLs) and gain access to restricted resources. This may aid in further attacks.
Versions prior to Samba 4.0.16 and 4.1.6 are vulnerable.
Exploit / POC
Samba 'smbcacls' Command Security Bypass Vulnerability
Attackers can use readily available networking tools to exploit this issue.
Attackers can use readily available networking tools to exploit this issue.