CVE-2010-0728: High severity Samba Samba vulnerability
Published Mar 9, 2010
·Updated
smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
Affected Software
3 affected components
Samba Samba=3.4.6
Samba Samba=3.3.11
Samba Samba=3.5.0
Event History
Mar 9, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Mar 10, 2010
Data Sourced
via NVD·08:13 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0728?
CVE-2010-0728 has a moderate severity rating as it allows remote authenticated users to bypass file permissions.
2
How do I fix CVE-2010-0728?
To fix CVE-2010-0728, upgrade Samba to a version later than 3.3.12, 3.4.7, or 3.5.1.
3
What versions of Samba are affected by CVE-2010-0728?
CVE-2010-0728 affects Samba versions 3.3.11, 3.4.6, and 3.5.0.
4
Who is at risk due to CVE-2010-0728?
Users with remote authenticated access to the Samba server are at risk of having their file permissions bypassed due to CVE-2010-0728.
5
What capabilities does CVE-2010-0728 exploit?
CVE-2010-0728 exploits the CAP_DAC_OVERRIDE capability when libcap support is enabled in Samba.