Уязвимость CVE-2015-7560: Информация

Описание

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.

Важность: MEDIUM (6,5) Вектор: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-7560
Опубликовано: 14 марта 2016 г.
Изменено: 29 августа 2022 г.
Идентификатор типа ошибки: CWE-284

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
sambasisyphus4.3.6-alt14.19.6-alt1ALT-PU-2016-1197-1161097Исправлено
sambap104.3.6-alt14.19.6-alt1ALT-PU-2016-1197-1161097Исправлено
sambap94.3.6-alt14.14.10-alt2ALT-PU-2016-1197-1161097Исправлено
sambac10f14.3.6-alt14.16.11-alt2ALT-PU-2016-1197-1161097Исправлено
sambac9f24.3.6-alt14.14.14-alt0.c9.1ALT-PU-2016-1197-1161097Исправлено
sambac74.3.8-alt0.M70C.14.6.15-alt1.M70C.1ALT-PU-2016-1359-1163360Исправлено
samba-DCc74.4.2-alt0.M70C.14.6.15-alt1.M70C.1ALT-PU-2016-1360-1163360Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://www.samba.org/samba/security/CVE-2015-7560.html
  • Vendor Advisory
https://bugzilla.samba.org/show_bug.cgi?id=11648
  • Issue Tracking
  • Vendor Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842
  • Third Party Advisory
84267
  • Third Party Advisory
  • VDB Entry
FEDORA-2016-ed1587f6ba
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:1106
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:1107
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:0813
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:0814
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:0816
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:0837
  • Mailing List
  • Third Party Advisory
DSA-3514
  • Third Party Advisory
FEDORA-2016-4b55f00d00
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:1064
  • Mailing List
  • Third Party Advisory
1035220
  • Third Party Advisory
  • VDB Entry
FEDORA-2016-cad77a4576
  • Mailing List
  • Third Party Advisory
SUSE-SU-2016:0905
  • Mailing List
  • Third Party Advisory
openSUSE-SU-2016:0877
  • Mailing List
  • Third Party Advisory
USN-2922-1
  • Third Party Advisory

    1. Конфигурация 1

      cpe:2.3:a:samba:samba:4.4.0:rc3:*:*:*:*:*:*
      cpe:2.3:a:samba:samba:4.4.0:rc1:*:*:*:*:*:*
      cpe:2.3:a:samba:samba:4.4.0:rc2:*:*:*:*:*:*
      cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
      Start including
      3.2.0
      End excliding
      4.1.23
      cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
      Start including
      4.2.0
      End excliding
      4.2.9
      cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
      Start including
      4.3.0
      End excliding
      4.3.6

      Конфигурация 2

      cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

      Конфигурация 3

      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
      cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Версия: v24.4.2
Наверх