CVE-2010-0728

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-10 · updated 2026-06-16
Weakness: CWE-264

Description

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

Affected products

Samba: 3.3.11, 3.4.6, 3.5.0

References

http://lists.samba.org/archive/samba-announce/2010/000211.html
http://www.samba.org/samba/history/samba-3.3.12.html
http://www.samba.org/samba/history/samba-3.4.7.html
http://www.samba.org/samba/history/samba-3.5.1.html
http://www.samba.org/samba/security/CVE-2010-0728
https://bugzilla.samba.org/show_bug.cgi?id=7222
http://lists.samba.org/archive/samba-announce/2010/000211.html
http://www.samba.org/samba/history/samba-3.3.12.html
http://www.samba.org/samba/history/samba-3.4.7.html
http://www.samba.org/samba/history/samba-3.5.1.html
http://www.samba.org/samba/security/CVE-2010-0728
https://bugzilla.samba.org/show_bug.cgi?id=7222

Get alerted when CVE-2010-0728 or the next vulnerability affects your stack