Non notée
CVE-2021-44141 All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file…
Description
All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| samba | Versions non publiées |
Références
- www.samba.org www.samba.org
- GLSA-202309-06 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de samba
Les 40 CVE de samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
Élevée
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
Élevée
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Moyenne
CVE-2023-0225
A flaw was found in Samba
4.3
Moyenne