CVE-2013-6442: Medium severity Samba Samba vulnerability
The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
samba/smbcaclsto a version that resolves this vulnerability.Fixed in 4.0.16 - Upgrade
Upgrade
samba/smbcaclsto a version that resolves this vulnerability.Fixed in 4.1.6
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6442?
CVE-2013-6442 has been rated as a medium severity vulnerability.
How do I fix CVE-2013-6442?
To fix CVE-2013-6442, upgrade Samba to version 4.0.16 or later for the 4.0.x series, or 4.1.6 or later for the 4.1.x series.
What systems are affected by CVE-2013-6442?
CVE-2013-6442 affects Samba versions 4.0.0 through 4.0.15 and 4.1.0 through 4.1.5.
What is the impact of CVE-2013-6442?
CVE-2013-6442 allows remote attackers to bypass intended access restrictions.
Is CVE-2013-6442 being actively exploited?
There is no public information indicating that CVE-2013-6442 is actively being exploited in the wild.