VULNERABILITY INTELLIGENCE

CVE-2010-0728

CVSS score8.5 HIGH
EPSS probability3.81%
CISA KEVNot currently listed
Published2010-03-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C

Description

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

Primary references