CVE-2013-1863

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-19 · updated 2026-06-16
Weakness: CWE-264

Description

Samba 4.x before 4.0.4, when configured as an Active Directory domain controller, uses world-writable permissions on non-default CIFS shares, which allows remote authenticated users to read, modify, create, or delete arbitrary files via standard filesystem operations.

Affected products

Samba: 4.0.0, 4.0.1, 4.0.2, 4.0.3

References

http://www.samba.org/samba/ftp/patches/security/samba-4.0.3-CVE-2013-1863.patch
http://www.samba.org/samba/security/CVE-2013-1863
http://www.samba.org/samba/ftp/patches/security/samba-4.0.3-CVE-2013-1863.patch
http://www.samba.org/samba/security/CVE-2013-1863

Get alerted when CVE-2013-1863 or the next vulnerability affects your stack