CVE-2013-6442

Publication date 14 March 2014

Last updated 24 July 2024

Ubuntu priority

Description

The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
samba	17.04 zesty	Fixed 2:4.1.3+dfsg-2ubuntu4
	16.10 yakkety	Fixed 2:4.1.3+dfsg-2ubuntu4
	16.04 LTS xenial	Fixed 2:4.1.3+dfsg-2ubuntu4
	15.10 wily	Fixed 2:4.1.3+dfsg-2ubuntu4
	15.04 vivid	Fixed 2:4.1.3+dfsg-2ubuntu4
	14.10 utopic	Fixed 2:4.1.3+dfsg-2ubuntu4
	14.04 LTS trusty	Fixed 2:4.1.3+dfsg-2ubuntu4
	13.10 saucy	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Not affected
samba4	17.04 zesty	Not in release
	16.10 yakkety	Not in release
	16.04 LTS xenial	Not in release
	15.10 wily	Not in release
	15.04 vivid	Not in release
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored end of life
	12.10 quantal	Ignored end of life
	12.04 LTS precise	Ignored end of life
	10.04 LTS lucid	Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
samba	Upstream: http://www.samba.org/samba/ftp/patches/security/samba-4.1.5-CVE-2013-4496-CVE-2013-6442.patch
samba4	Upstream: http://www.samba.org/samba/ftp/patches/security/samba-4.1.5-CVE-2013-4496-CVE-2013-6442.patch Upstream: http://www.samba.org/samba/ftp/patches/security/samba-4.0.15-CVE-2013-4496-CVE-2013-6442.patch

CVE-2013-6442

Description

Status

Patch details

References

Other references

Access our resources on patching vulnerabilities