NetSight
medium6.0

CVE-2013-1863

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remo…

Impact

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.

Affected products

VendorProductAffected versions
SambaSamba
Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3

Weakness classification

References