CVE-2013-0172 | BDVDB-2026-54164 Detail

Description#

Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authenticated users to bypass intended restrictions on modifying LDAP directory objects by leveraging (1) objectClass access by a user, (2) objectClass access by a group, or (3) write access to an attribute.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.samba.org/samba/security/CVE-2013-0172

Exploit#

No public exploit known

History#

Version 12013-01-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.