CVEvulnerability
CVE-2013-0172
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-01-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.
Affected configurations
• samba samba 4.0.0
Related
Weakness · not in database (1)
References
- http://www.samba.org/samba/security/CVE-2013-0172 Vendor Advisory
- http://www.samba.org/samba/security/CVE-2013-0172 Vendor Advisory