NVD

Id
26454  
Name
CVE-2015-5252  
Description
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-12-29  
Modified Date
2016-12-30  
Seq
2015-5252  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139857 26454 CVE-2015-5252 FEDORA-2015-b36076d32e  View
139858 26454 CVE-2015-5252 FEDORA-2015-0e0879cc8a  View
139859 26454 CVE-2015-5252 SUSE-SU-2015:2304  View
139860 26454 CVE-2015-5252 SUSE-SU-2015:2305  View
139861 26454 CVE-2015-5252 openSUSE-SU-2015:2354  View
139862 26454 CVE-2015-5252 openSUSE-SU-2015:2356  View
139863 26454 CVE-2015-5252 SUSE-SU-2016:0032  View
139864 26454 CVE-2015-5252 SUSE-SU-2016:0164  View
139865 26454 CVE-2015-5252 openSUSE-SU-2016:1064  View
139866 26454 CVE-2015-5252 SUSE-SU-2016:1105  View
139867 26454 CVE-2015-5252 openSUSE-SU-2016:1106  View
139868 26454 CVE-2015-5252 openSUSE-SU-2016:1107  View
139869 26454 CVE-2015-5252 DSA-3433  View
139870 26454 CVE-2015-5252 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
139871 26454 CVE-2015-5252 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
139872 26454 CVE-2015-5252 79733  View
139873 26454 CVE-2015-5252 1034493  View
139874 26454 CVE-2015-5252 USN-2855-1  View
139875 26454 CVE-2015-5252 USN-2855-2  View
139876 26454 CVE-2015-5252 https://bugzilla.redhat.com/show_bug.cgi?id=1290288  View
139877 26454 CVE-2015-5252 https://git.samba.org/?p=samba.git;a=commit;h=4278ef25f64d5fdbf432ff1534e275416ec9561e  View
139878 26454 CVE-2015-5252 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993  View
139879 26454 CVE-2015-5252 GLSA-201612-47  View
139880 26454 CVE-2015-5252 https://www.samba.org/samba/security/CVE-2015-5252.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11255 JVNDB-2015-006575 Samba の smbd の vfs.c におけるファイルへのアクセス制限を回避される脆弱性 Samba の smbd の vfs.c には、特定の部分文字列関係を持つ共有名が存在する場合、ファイルへのアクセス制限を回避される脆弱性が存在します。 CVE-2015-5252 82477 CVE-2015-5252 26454 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006575.html 2015-12-10 2016-01-05 View