Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmfh-pcgm-2499

Опубликовано: 22 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

EPSS

Процентиль: 44%
0.00209
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
CWE-59

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 3 лет назад

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

CVSS3: 6.5
redhat
больше 3 лет назад

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

CVSS3: 4.3
nvd
больше 3 лет назад

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

CVSS3: 4.3
msrc
8 месяцев назад

Описание отсутствует

CVSS3: 4.3
debian
больше 3 лет назад

All versions of Samba prior to 4.15.5 are vulnerable to a malicious cl ...

EPSS

Процентиль: 44%
0.00209
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200
CWE-59