CVE-2013-6442

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option…

published March 14, 2014

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04103 · 90.7th percentile
Published
2014-03-14T10:00Z
EPSS history
Timeline
  • 14 MAR 10:00Z
    The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option…
    cvelistv5