CVE-2007-2407 The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk...
MediumCVSS 4.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba server | All versions | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-07-31 vendor-advisory
- 26235 third-party-advisory
- 25159 patch vdb-entry
- ADV-2007-2732 vdb-entry
- samba-filesystem-security-bypass(35738) vdb-entry
- Debian Security Tracker CVE-2007-2407 vendor-advisory