Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2013-0172 to a friend New vulnerability? New tool? Tell us	CVE-2013-0172 Samba AD DC LDAP Directory Objects Erroneous Write Access Permissions Vulnerability     Credit: The information has been provided by Andrew Bartlett. The original article can be found at: http://www.samba.org/samba/security/CVE-2013-0172 Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2013-0172 Details Check for CVE-2013-0172 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Samba 4.0.0 Samba contains a flaw when acting as an AD (Active Directory) DC (Domain Controller). The issue is triggered when a user or group is granted any access to a LDAP directory object based on objectClass or granted write access to any attribute on the object. This results in an authenticated user automatically being granted write access to the object or all attributes. Patch Availability: http://ftp.samba.org/pub/samba/patches/security/samba-4.0.0-CVE-2013-0172.patch CVE Information: 2013-0172 Disclosure Timeline: Disclosure Date :2013-01-15 Vendor Solution Date :2013-01-15  Comments on CVE-2013-0172:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®