Year-Old Samba Bug Allows Access to Forbidden Root Share Paths

guest · Sep 4, 2019

Year-Old Samba Bug Allows Access to Forbidden Root Share Paths
September 4, 2019
https://www.bleepingcomputer.com/ne...-allows-access-to-forbidden-root-share-paths/

For almost a year, threat actors could exploit a vulnerability in Samba software that allowed them to bypass file-sharing permissions and escape outside the share root directory.
The security flaw has been introduced in Samba 4.9.0, released on September 13, 2018, and can be leveraged under certain conditions.
Cache reset failure
Exploitation is possible on systems where the 'wide links' option in the Samba configuration file is turned on. They also need to either allow insecure wide links (the setting 'allow insecure wide links' is set to 'yes') or have the 'unix extension' parameter set to 'no.'
[...] security advisory [...]

The severity level is borderline critical, as the calculated score by Samba maintainers is 8.7. Other organizations calculated a more severe score, of 9.1.
Click to expand...

Log in or Sign up

Year-Old Samba Bug Allows Access to Forbidden Root Share Paths

guest Guest

Log in or Sign up

Year-Old Samba Bug Allows Access to Forbidden Root Share Paths

guest Guest

Useful Searches