Lucene search
UbuntuUSN-3267-1HistoryApr 25, 2017 - 12:00 a.m.
Samba vulnerability
2017-04-2500:00:00
ubuntu.com
36
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.015
Percentile
87.1%
Releases
- Ubuntu 17.04
Packages
- samba - SMB/CIFS file, print, and login server for Unix
Details
Jann Horn discovered that Samba incorrectly handled symlinks. An
authenticated remote attacker could use this issue to access files on the
server outside of the exported directories.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 17.04 | noarch | samba | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ctdb | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | ctdb-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libnss-winbind | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libnss-winbind-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libpam-winbind | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libpam-winbind-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libparse-pidl-perl | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libsmbclient | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
| Ubuntu | 17.04 | noarch | libsmbclient-dbgsym | < 2:4.5.8+dfsg-0ubuntu0.17.04.1 | UNKNOWN |
References
Related
ubuntucve
ubuntucve
CVE-2017-2619
2017-03-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.6.1-alt1.S1
2017-03-23 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.6.1-alt1
2017-03-23 00:00:00
Security fix for the ALT Linux 8 package samba version 4.6.1-alt1
2017-03-23 00:00:00
nessus
nessus
Slackware 14.0 / 14.1 / 14.2 / current : samba (SSA:2017-082-02)
2017-03-24 00:00:00
openSUSE Security Update : samba (openSUSE-2017-437)
2017-04-06 00:00:00
SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:0858-1)
2017-03-30 00:00:00
ubuntu
ubuntu
Samba vulnerability
2017-03-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0841-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for samba (openSUSE-SU-2017:0935-1)
2017-04-06 00:00:00
openSUSE: Security Advisory for samba (openSUSE-SU-2017:0944-1)
2017-04-06 00:00:00
slackware
slackware
[slackware-security] samba
2017-03-24 05:44:58
[slackware-security] samba
2017-04-01 05:21:31
ibm
ibm
Security Bulletin: Samba vulnerability affects IBM SONAS (CVE-2017-2619)
2018-06-18 00:35:49
Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2017-2619)
2018-08-01 18:59:58
Security Bulletin: Vulnerability CVE-2017-2619 in Samba affects IBM i
2019-12-18 14:26:38
osv
osv
samba - security update
2017-04-11 00:00:00
samba - security update
2017-03-23 00:00:00
CVE-2017-2619
2018-03-12 15:29:00
fedora
fedora
[SECURITY] Fedora 26 Update: samba-4.6.2-0.fc26
2017-04-06 13:46:48
[SECURITY] Fedora 25 Update: samba-4.5.8-0.fc25
2017-04-02 20:56:24
[SECURITY] Fedora 24 Update: samba-4.4.13-1.fc24
2017-04-15 22:49:44
prion
prion
Design/Logic Flaw
2018-03-12 15:29:00
suse
suse
Security update for samba (important)
2017-03-29 21:10:19
Security update for samba (important)
2017-04-05 18:12:14
Security update for samba (important)
2017-05-08 21:12:01
checkpoint_advisories
checkpoint_advisories
Samba Symlink Unauthorized File Access (CVE-2017-2619)
2017-06-29 00:00:00
debian
debian
[SECURITY] [DSA 3816-1] samba security update
2017-03-23 11:27:29
[SECURITY] [DSA 3816-1] samba security update
2017-03-23 11:27:29
[SECURITY] [DLA 894-1] samba security update
2017-04-11 14:04:01
redhatcve
redhatcve
CVE-2017-2619
2017-03-23 09:48:01
f5
f5
K20722197 : Samba vulnerability CVE-2017-2619
2018-03-20 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:18:59
cve
cve
CVE-2017-2619
2018-03-12 15:29:00
alpinelinux
alpinelinux
CVE-2017-2619
2018-03-12 15:29:00
zdt
zdt
nvd
nvd
CVE-2017-2619
2018-03-12 15:29:00
debiancve
debiancve
CVE-2017-2619
2018-03-12 15:29:00
freebsd
freebsd
samba -- symlink race allows access outside share definition
2017-03-23 00:00:00
cvelist
cvelist
CVE-2017-2619
2017-03-27 00:00:00
samba
samba
Symlink race allows access outside share definition.
2017-03-23 00:00:00
redhat
redhat
(RHSA-2017:2338) Moderate: samba security update
2017-08-01 06:33:39
(RHSA-2017:2778) Moderate: samba security, bug fix, and enhancement update
2017-09-21 04:06:21
(RHSA-2017:1265) Moderate: samba security and bug fix update
2017-05-22 09:06:50
seebug
seebug
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2017-05-22 16:26:22
libsmbclient, samba security update
2017-09-21 14:43:52
oraclelinux
oraclelinux
samba security update
2017-09-26 00:00:00
samba security and bug fix update
2017-05-22 00:00:00
samba security, bug fix, and enhancement update
2017-08-07 00:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2017-05-25 17:37:42
amazon
amazon
Important: samba
2017-05-30 23:54:00
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.9
Confidence
High
EPSS
0.015
Percentile
87.1%
Related for USN-3267-1