Description

vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html

http://www.debian.org/security/2016/dsa-3433

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securityfocus.com/bid/79733

http://www.securitytracker.com/id/1034493

http://www.ubuntu.com/usn/USN-2855-1

http://www.ubuntu.com/usn/USN-2855-2

https://bugzilla.redhat.com/show_bug.cgi?id=1290288

https://git.samba.org/?p=samba.git;a=commit;h=4278ef25f64d5fdbf432ff1534e275416ec9561e

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993

https://security.gentoo.org/glsa/201612-47

https://www.samba.org/samba/security/CVE-2015-5252.html

Details

Risk Information

CVSS v2

CVSS v3