« Volver al listado

CVE-2013-0454

Estado: ModificadaMedia (4)—

The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Canonical — Ubuntu LinuxIBM — StorwizeSamba — Samba

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0454",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-03-26T21:55:01.100",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004289",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1802-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=928419",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://bugzilla.samba.org/show_bug.cgi?id=8738",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80970",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://lists.samba.org/archive/samba-announce/2012/000259.html",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://www.samba.org/samba/security/CVE-2013-0454",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=ssg1S1004289",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-1802-1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=928419",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.samba.org/show_bug.cgi?id=8738",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80970",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.samba.org/archive/samba-announce/2012/000259.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.samba.org/samba/security/CVE-2013-0454",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or \"hide unreadable\" parameter."
    },
    {
      "lang": "es",
      "value": "Samba anterior a v3.6.6, tal como se utiliza en el IBM Storwize V7000 Unified v1.3 anterior a v1.3.2.3, y v1.4 anterior a  v1.4.0.1 y posiblemente otros productos, no se aplican correctamente los atributos de CIFS de compartición, lo que permite a usuarios remotos autenticados para (1) escribir en un participación de sólo lectura, (2) disparar problemas de integridad de datos relacionados con la operación de bloqueo, bloqueo, coherencia, arrendamiento de atributo, o (3) tener un impacto no especificado mediante el aprovechamiento de la manipulación incorrecta del parámetro \"hide unreadable\"."
    }
  ],
  "lastModified": "2026-06-16T23:49:31.273",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5D324C4-97C7-49D3-A809-9EAD4B690C69"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8B4B6AD-425B-43F5-BBDC-3109CBD33F6D",
              "versionEndIncluding": "3.6.5"
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66999F57-FF99-419F-BB12-35DC79FCE945"
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BD1356E-3B43-4C5B-9969-902440918EE9"
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A7F3209-B376-490B-A761-2CCB6CEE209A"
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "406C2297-B58D-4623-9E7A-2C438ABBAC93"
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6AF0DD4-08D4-4726-8A12-E979FF3322B0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:storwize:v7000:1.3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDD7FC50-A974-4C73-8217-F4E838C30286"
            },
            {
              "criteria": "cpe:2.3:a:ibm:storwize:v7000:1.4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CB5E582-68FB-4513-9C2E-474E2B7B47CB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}