CVE-2015-7560
CVE-2015-7560
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.
CVSS 6.5 · Moyenne · EPSS 12,9% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
samba Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.6+dfsg-1
Mettez à jour vers 2:4.3.6+dfsg-1
samba Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.6+dfsg-1
Mettez à jour vers 2:4.3.6+dfsg-1
samba Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.6+dfsg-1
Mettez à jour vers 2:4.3.6+dfsg-1
samba Ubuntu:14.04:LTS
- Versions du logiciel
- 2:3.6.18-1ubuntu3
- 2:4.0.10+dfsg-4ubuntu2
- 2:4.0.13+dfsg-1ubuntu1
- 2:4.1.3+dfsg-2ubuntu2
- 2:4.1.3+dfsg-2ubuntu3
- 2:4.1.3+dfsg-2ubuntu4
- 2:4.1.3+dfsg-2ubuntu5
- 2:4.1.6+dfsg-1ubuntu1
- 2:4.1.6+dfsg-1ubuntu2
- 2:4.1.6+dfsg-1ubuntu2.14.04.1
- 2:4.1.6+dfsg-1ubuntu2.14.04.2
- 2:4.1.6+dfsg-1ubuntu2.14.04.3
- 2:4.1.6+dfsg-1ubuntu2.14.04.4
- 2:4.1.6+dfsg-1ubuntu2.14.04.5
- 2:4.1.6+dfsg-1ubuntu2.14.04.7
- 2:4.1.6+dfsg-1ubuntu2.14.04.8
- 2:4.1.6+dfsg-1ubuntu2.14.04.9
- 2:4.1.6+dfsg-1ubuntu2.14.04.11
- 2:4.1.6+dfsg-1ubuntu2.14.04.12
- Plages de versions concernées
- ECOSYSTEM: < 2:4.1.6+dfsg-1ubuntu2.14.04.13
Mettez à jour vers 2:4.1.6+dfsg-1ubuntu2.14.04.13
samba Ubuntu:16.04:LTS
- Versions du logiciel
- 2:4.1.17+dfsg-4ubuntu2
- 2:4.1.20+dfsg-1ubuntu1
- 2:4.1.20+dfsg-1ubuntu2
- 2:4.1.20+dfsg-1ubuntu3
- 2:4.1.20+dfsg-1ubuntu5
- 2:4.3.3+dfsg-1ubuntu1
- 2:4.3.3+dfsg-1ubuntu2
- 2:4.3.3+dfsg-1ubuntu3
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.6+dfsg-1ubuntu1
Mettez à jour vers 2:4.3.6+dfsg-1ubuntu1
Sources originales
- http://www.securityfocus.com/bid/84267
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842
- http://www.securitytracker.com/id/1035220
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html
- https://www.samba.org/samba/security/CVE-2015-7560.html
- https://bugzilla.samba.org/show_bug.cgi?id=11648
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html
- http://www.ubuntu.com/usn/USN-2922-1
- http://www.debian.org/security/2016/dsa-3514
- https://nvd.nist.gov/vuln/detail/CVE-2015-7560