Description
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Samba samba
4.6.1affected4.5.7affected4.4.11affected
References
- https://access.redhat.com/errata/RHSA-2017:2778 ↗
- https://www.debian.org/security/2017/dsa-3816 ↗
- http://www.securityfocus.com/bid/97033 ↗
- https://www.exploit-db.com/exploits/41740/ ↗
- http://www.securitytracker.com/id/1038117 ↗
- https://access.redhat.com/errata/RHSA-2017:2338 ↗
- https://www.samba.org/samba/security/CVE-2017-2619.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1429472 ↗
- https://access.redhat.com/errata/RHSA-2017:1265 ↗
- https://access.redhat.com/errata/RHSA-2017:2789 ↗
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03755en_us ↗