CVE-2013-0213

EXPLOITED RANSOMWARE

Samba 3.x < 3.5.21, 3.6.x < 3.6.12, 4.x < 4.0.2 - Clickjacking via FRAME or IFRAME Elements

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2013-0213 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

The Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.21, 3.6.x before 3.6.12, and 4.x before 4.0.2 allows remote attackers to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.

References (12)

Core 12
Core References
Vendor Advisory x_refsource_confirm
http://www.samba.org/samba/security/CVE-2013-0213
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-02/msg00033.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/57631
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-02/msg00029.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0305.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2922-1
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2617
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1310.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1542.html

Scores

EPSS 0.1113
EPSS Percentile 93.6%

Details

VulnCheck KEV 2024-02-08
Ransomware Use Confirmed
CWE
CWE-20
Status published
Products (37)
samba/samba 3.0.0
samba/samba 3.0.1
samba/samba 3.0.2 (2 CPE variants)
samba/samba 3.0.2a
samba/samba 3.0.3
samba/samba 3.0.4 (2 CPE variants)
samba/samba 3.0.5
samba/samba 3.0.6
samba/samba 3.0.7
samba/samba 3.0.8
... and 27 more
Published Feb 02, 2013
Tracked Since Feb 18, 2026