PT-2013-1325 · Samba+1 · Samba+1

Björn Baumbach + 1 · Publicado 2013-11-12 · Atualizado 2024-06-15 · CVE-2013-4476

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions 4.0.x through 4.0.10 Samba versions 4.1.x through 4.1.0

Description The issue is related to insufficient cryptographic protection mechanisms in Samba, allowing local users to obtain sensitive information. When LDAP or HTTP is provided over SSL, Samba uses world-readable permissions for a private key, enabling access to the key file and potentially allowing attackers to obtain confidential data.

Recommendations For Samba versions 4.0.x through 4.0.10, update to version 4.0.11 or later. For Samba versions 4.1.x through 4.1.0, update to version 4.1.1 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

ALT-PU-2013-1099

BDU:2021-01301

CVE-2013-4476

ECHO-A71F-6E74-B0F4

OPENSUSE-SU-2024:10069-1

Produtos afetados

Alt Linux

Samba

Referências · 68

• https://suse.com/security/cve/CVE-2010-1635 · Nota
• https://suse.com/security/cve/CVE-2015-5370 · Nota
• https://suse.com/security/cve/CVE-2009-2813 · Nota
• https://suse.com/security/cve/CVE-2009-2948 · Nota
• https://suse.com/security/cve/CVE-2013-4408 · Nota
• https://suse.com/security/cve/CVE-2013-4475 · Nota
• https://suse.com/security/cve/CVE-2013-0172 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-3069 · Nota
• https://suse.com/security/cve/CVE-2012-0870 · Nota
• http://samba.org/samba/history/samba-4.0.11.html · Nota
• https://suse.com/security/cve/CVE-2010-0787 · Nota
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00088.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5252 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4476 · Nota de Segurança