NetSight
IP …
medium4.0

CVE-2013-4475

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote att…

Impact

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Affected products

VendorProductAffected versions
SambaSamba
from 3.2.0 before 3.6.20
from 4.0.0 before 4.0.11
Version 4.1.0
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04, 13.10

Weakness classification

CWE-264

References