CVE-2013-0454

CVE-2013-0454 describes a vulnerability in the SMB2 implementation of Samba 3.6.x before 3.6.6, affecting products like IBM Storwize V7000 Unified and Canonical Ubuntu Linux. This flaw allows remote authenticated users to bypass CIFS share attributes, enabling unauthorized write access to read-only shares, causing data integrity issues related to oplocks, or having an unspecified impact through mishandling of browseable or "hide unreadable" parameters. The vulnerability has a CVSS score of 4.0 (AV:N/AC:L/Au:S/C:N/I:P/A:N), indicating a network-based attack with low complexity requiring authentication, leading to potential partial integrity impact but no confidentiality or availability impact. Its EPSS score is low, suggesting a low likelihood of exploitation. There is no known active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage, suggesting it is not a widely targeted vulnerability.