Vulnetix
Try Vulnetix Request Demo
CVE-2013-4475 PUBLISHED

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

EPSS 6.14% · 90.7th percentile

Risk Scores

EPSS Score
6.14%
90.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSsamba0, 2:3.6.18-1ubuntu3, 2:4.0.10+dfsg-4ubuntu2

Timeline

References

Open in Interactive Console →