VDB

DEBIAN-CVE-2013-6442

DEBIAN-CVE-2013-6442 PUBLISHED CVSS 8.699999809265137 HIGH

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

Risk Scores

CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:11samba0, 0, 0
Debian:12samba0, 0, 0
Debian:13samba0, 0, 0
Debian:14samba0, 0, 0

Timeline

  • Mar 14, 2014 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›