Every CVE Search/ Get API key

CVE-2013-4475

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when...

4.0 MediumFix available

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Exploit likelihood

9.02%Up 4.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
CVE-2013-4475
CVSS 2.0
4.0 MediumAV:N/AC:H/Au:N/C:P/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
CVE-2013-4475
Updated
2026-11-02
EUVDEUVD-2013-4343 No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
EUVD-2013-4343
Updated
2026-11-03
GitHub AdvisoriesGHSA-rhf5-jmh4-q5rv No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when...

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
GHSA-rhf5-jmh4-q5rv
Updated
2026-11-02
OSV No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
CVE-2013-4475
Updated
2026-11-02
OSVDEBIAN-CVE-2013-4475 No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
DEBIAN-CVE-2013-4475
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2013-0348 No score

Updated samba packages fix CVE-2013-4475

Updated samba packages fix security vulnerabilities:

Samba versions before 3.6.20 do not check the underlying file or directory ACL when opening an alternate data stream (CVE-2013-4475).

Samba is not configured by default to support alternate data streams, so only servers that have enabled the streams_depot or streams_xattr VFS modules are affected.

Record
MGASA-2013-0348
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02
OSVSUSE-SU-2015:0386-1 No score

Security update for Samba

This update fixes the following security issues with Samba:

* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
  (CVE-2013-4475)

And fixes the following non-security issues:

* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
  registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
  WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes

Security Issue references:

* CVE-2012-6150
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>
Record
SUSE-SU-2015:0386-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-4475 No score

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream (ADS).

Record
UBUNTU-CVE-2013-4475
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 before 2:4.0.11+dfsg-1
2:4.0.11+dfsg-1
samba
Debian:13
 before 2:4.0.11+dfsg-1
2:4.0.11+dfsg-1
samba
Debian:14
 before 2:4.0.11+dfsg-1
2:4.0.11+dfsg-1
samba
Debian:6.0
From an advisory covering 2 CVEs
 before 2:3.5.6~dfsg-3squeeze11, plus listed versions
2:3.5.6~dfsg-32:3.5.6~dfsg-3squeeze12:3.5.6~dfsg-3squeeze102:3.5.6~dfsg-3squeeze22:3.5.6~dfsg-3squeeze3
Show 6 moreShow less
2:3.5.6~dfsg-3squeeze42:3.5.6~dfsg-3squeeze52:3.5.6~dfsg-3squeeze62:3.5.6~dfsg-3squeeze72:3.5.6~dfsg-3squeeze82:3.5.6~dfsg-3squeeze9
2:3.5.6~dfsg-3squeeze11
samba
Debian:7
From an advisory covering 2 CVEs
 before 2:3.6.6-6+deb7u2, plus listed versions
2:3.6.6-62:3.6.6-6+deb7u12:3.6.6-6+deb7u1~bpo60+12:3.6.6-6+deb7u2~bpo60+1
2:3.6.6-6+deb7u2
samba
Mageia:2
 before 3.6.5-2.4.mga2
3.6.5-2.4.mga2
samba
Mageia:3
 before 3.6.15-1.2.mga3
3.6.15-1.2.mga3
samba3x
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-client
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-common
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
Show 85 moreShow less
Affected packages
PackageAffectedFixed
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-doc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-swat
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-client
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-common
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-swat
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:3.6.6-0.138.el5_10
0:3.6.6-0.138.el5_10
libsmbclient
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-client
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-clients
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-domainjoin-gui
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-swat
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:3.6.9-167.el6_5
0:3.6.9-167.el6_5
libsmbclient
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
libsmbclient-devel
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-client
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-common
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-debuginfo
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-doc
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-domainjoin-gui
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-glusterfs
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-swat
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-clients
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-devel
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba-winbind-krb5-locator
Red Hat:storage:2.1:server:el6
From an advisory covering 2 CVEs
 before 0:3.6.9-167.5.1.el6rhs
0:3.6.9-167.5.1.el6rhs
samba
Ubuntu:14.04:LTS
 before 2:4.0.13+dfsg-1ubuntu1, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu2
2:4.0.13+dfsg-1ubuntu1
samba
openSUSE:Tumbleweed
From an advisory covering 56 CVEs
 before 4.5.0-1.1
4.5.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4475 is a medium vulnerability (CVSS 4.0) in Samba, published November 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.02%, the 95th percentile. Fixed in samba 2:4.0.11+dfsg-1.

References

Show 145 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open