VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 26, 2013· Updated Apr 29, 2026

CVE-2013-0454

CVE-2013-0454

Description

The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.

Affected products

10
  • IBM/Storwize2 versions
    cpe:2.3:a:ibm:storwize:v7000:1.3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:storwize:v7000:1.3:*:*:*:*:*:*
    • cpe:2.3:a:ibm:storwize:v7000:1.4:*:*:*:*:*:*
  • Samba (software)/Samba6 versions
    cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*range: <=3.6.5
    • cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:samba:samba:3.6.4:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux
    cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweed
    Range: < 4.5.0-1.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.