CVE-2010-0728: Samba

High severity, CVSS 8.5. EPSS: 3.8% chance of exploitation in the next 30 days.

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAP_DAC_OVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client.

Affected products

• Samba Samba: version 3.3.11 only; version 3.4.6 only; version 3.5.0 only

Published 2010-03-10. Last modified 2026-06-16.