CVE-2010-0728 Security feature bypass in n/a
Authenticated remote users can bypass file permissions to read or modify protected files when Samba is configured with libcap support.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0728?
CVE-2010-0728 is a high-severity vulnerability in Samba Samba, published on 9 Mar 2010. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.
Weakness: CWE-264
Which versions are affected by CVE-2010-0728?
It affects 1 product.
Products include Samba Samba.
How do I fix CVE-2010-0728?
Apply the vendor's patch.
Is CVE-2010-0728 being exploited?
There is no known exploitation of CVE-2010-0728 in the wild and no public exploit code.
Other vulnerabilities in Samba Samba
Sources
Also known as DEBIAN-CVE-2010-0728, ECHO-1da3-7197-90d4, GHSA-76v2-q54h-r7wc.