CVE-2013-0172: Low severity samba vulnerability
Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0172?
CVE-2013-0172 has a medium severity level as it allows remote authenticated users to bypass restrictions on modifying LDAP directory objects.
How do I fix CVE-2013-0172?
To fix CVE-2013-0172, upgrade Samba to version 4.0.1 or later.
Who is affected by CVE-2013-0172?
CVE-2013-0172 affects Samba 4.0.0 installations configured as Active Directory domain controllers.
What types of attacks can exploit CVE-2013-0172?
CVE-2013-0172 can be exploited by remote authenticated users to gain unauthorized modification access to LDAP directory objects.
What versions of Samba are vulnerable to CVE-2013-0172?
Samba versions prior to 4.0.1, specifically version 4.0.0, are vulnerable to CVE-2013-0172.