PT-2013-1044
CVE-2013-1863
·
تاريخ النشر
2013-03-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Samba versions 4.x before 4.0.4
Description
The issue exists in Samba when configured as an Active Directory domain controller, where non-default CIFS shares have world-writable permissions. This allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.
Recommendations
For Samba versions 4.x before 4.0.4, update to version 4.0.4 or later to resolve the issue. As a temporary workaround, consider restricting write access to non-default CIFS shares to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾