Vulnetix
Try Vulnetix Request Demo
CVE-2014-0178 PUBLISHED

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.

EPSS 1.92% · 83.2th percentile

Risk Scores

EPSS Score
1.92%
83.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSsamba0, 2:3.6.18-1ubuntu3, 2:4.0.10+dfsg-4ubuntu2

Timeline

References

Open in Interactive Console →