VulnerabilityModified
CVE-2007-2407
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
MEDIUM 4.0EPSS 3.47%
Does this matter?
Lower severity and a low EPSS score (3.47%). Track it; it rarely justifies an emergency change on its own.
Description
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
- EPSS
- 3.47% probability · 88th percentile
- CISA KEV
- Not listed
- Affected
- samba/samba server
- Source
- cve@mitre.org
References
- http://docs.info.apple.com/article.html?artnum=306172
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://secunia.com/advisories/26235
- http://www.securityfocus.com/bid/25159Patch
- http://www.vupen.com/english/advisories/2007/2732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35738
- http://docs.info.apple.com/article.html?artnum=306172
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://secunia.com/advisories/26235
- http://www.securityfocus.com/bid/25159Patch
- http://www.vupen.com/english/advisories/2007/2732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35738
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.