CVE-2013-0454
- State
- Published
- Severity
- Not scored
- Published
- Mar 26, 2013
- Updated
- Aug 6, 2024
- Reserved
- Dec 16, 2012
Description
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- storwize-cifs-incorrect-permissions(80970)vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=928419
- USN-1802-1vendor-advisory
- http://www.ibm.com/support/docview.wss?uid=ssg1S1004289
- https://www.samba.org/samba/security/CVE-2013-0454
- https://bugzilla.samba.org/show_bug.cgi?id=8738
- [samba-announce] 20120625 [Announce] Samba 3.6.6 Available for Downloadmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.