Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-11-13 15:55
Updated : 2017-01-07 02:59
NVD link : CVE-2013-4475
Mitre link : CVE-2013-4475
JSON object : View
Products Affected
samba
- samba
CWE
CWE-264
Permissions, Privileges, and Access Controls
