PT-2013-2349 · Samba+1 · Samba+1

Ulf Troppens · Published 2013-03-26 · Updated 2024-06-15 · CVE-2013-0454

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Samba versions 3.6.x through 3.6.5 IBM Storwize V7000 Unified versions 1.3 through 1.3.2.2 IBM Storwize V7000 Unified versions 1.4 through 1.4.0.0

Description The issue is related to the SMB2 implementation, which does not properly enforce CIFS share attributes. This allows remote authenticated users to write to a read-only share, trigger data-integrity problems, or have an unspecified impact by leveraging incorrect handling of certain parameters, such as browseable or hide unreadable.

Recommendations For Samba versions 3.6.x through 3.6.5, update to version 3.6.6 or later. For IBM Storwize V7000 Unified versions 1.3 through 1.3.2.2, update to version 1.3.2.3 or later. For IBM Storwize V7000 Unified versions 1.4 through 1.4.0.0, update to version 1.4.0.1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-0454

ECHO-6D7B-51DC-61BE

OPENSUSE-SU-2024:10069-1

Affected Products

Ibm Storwize V7000 Unified

Samba

References · 68

• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-0454 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-0454 · Vendor Advisory
• https://samba.org/samba/security/CVE-2013-0454 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ssg1S1004289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0454 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-0454 · Vendor Advisory
• http://ubuntu.com/usn/USN-1802-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-5370 · Note
• https://suse.com/security/cve/CVE-2009-2813 · Note
• https://suse.com/security/cve/CVE-2009-2948 · Note
• https://suse.com/security/cve/CVE-2013-4408 · Note
• https://suse.com/security/cve/CVE-2012-0870 · Note
• https://bugzilla.samba.org/show_bug.cgi?id=8738 · Note
• https://suse.com/security/cve/CVE-2014-3560 · Note