NetSight
IP …
high7.5Public exploit code

CVE-2017-2619

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

Affected products

VendorProductAffected versions
SambaSamba
before 4.4.12
from 4.5.0 before 4.5.7
from 4.6.0 before 4.6.1
DebianDebian Linux
Version 8.0
RedhatEnterprise Linux
Versions 6.0, 7.0

Weakness classification

CWE-362CWE-59

References