CVE-2013-6442
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4...
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
Exploit likelihood
What each source reports
NVD Score used
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
CVE-2013-6442- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
CVE-2013-6442- Updated
- 2026-11-02
EUVDEUVD-2013-6250 No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
EUVD-2013-6250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qgqp-hrvv-cxc3 No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4...
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
GHSA-qgqp-hrvv-cxc3- Updated
- 2026-11-02
OSV No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
CVE-2013-6442- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6442 No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
DEBIAN-CVE-2013-6442- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-6442 No score
The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended administrative change.
- Record
UBUNTU-CVE-2013-6442- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:13 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
sambaDebian:14 |
before 2:4.1.6+dfsg-1 | 2:4.1.6+dfsg-1 |
samba4Red Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba4-libsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::client |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::computenode |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::server |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4Red Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-clientRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-commonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dcRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-dc-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-develRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-libsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pidlRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-pythonRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-swatRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-testRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbindRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-clientsRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
samba4-winbind-krb5-locatorRed Hat:enterprise_linux:6::workstation |
before 0:4.0.0-61.el6_5.rc4 | 0:4.0.0-61.el6_5.rc4 |
sambaUbuntu:14.04:LTS |
before 2:4.1.3+dfsg-2ubuntu4, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3 |
2:4.1.3+dfsg-2ubuntu4 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6442 is a medium vulnerability (CVSS 5.8) in Samba, published March 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.10%, the 90th percentile. Fixed in samba 2:4.1.6+dfsg-1.
References
samba.org/samba/history/samba-4.1.6.html
lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html
lists.opensuse.org/opensuse-updates/2014-03/msg00062.html
Show 78 moreShow less
bugzilla.samba.org/show_bug.cgi?id=10327
securityfocus.com/bid/66232
nvd.nist.gov/vuln/detail/CVE-2013-6442
github.com/advisories/GHSA-qgqp-hrvv-cxc3
security-tracker.debian.org/tracker/CVE-2013-6442
access.redhat.com/errata/RHSA-2014:0383
bugzilla.redhat.com/show_bug.cgi?id=1036897
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0383.json
cve.org/CVERecord?id=CVE-2012-6150
ubuntu.com/security/CVE-2013-6442
suse.com/security/cve/CVE-2009-1886