CVE-2013-1863: Medium severity samba vulnerability
Published Mar 19, 2013
·Updated
Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.
Affected Software
4 affected components
Samba Samba=4.0.0
Samba Samba=4.0.1
Samba Samba=4.0.2
Samba Samba=4.0.3
Remediation
Event History
Mar 19, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1863?
CVE-2013-1863 has a medium severity rating due to the potential for unauthorized file access.
2
How do I fix CVE-2013-1863?
To fix CVE-2013-1863, update Samba to version 4.0.4 or later to ensure proper permissions on CIFS shares.
3
What versions of Samba are affected by CVE-2013-1863?
CVE-2013-1863 affects Samba versions 4.0.0 to 4.0.3.
4
What type of access does CVE-2013-1863 allow?
CVE-2013-1863 allows remote authenticated users to read, modify, create, or delete arbitrary files.
5
Is CVE-2013-1863 related to Active Directory configurations?
Yes, CVE-2013-1863 is specifically related to Samba configured as an Active Directory domain controller.