Slackware Linux update for samba

Published: 2016-03-08 | Updated: 2017-05-06

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2015-7560 CVE-2016-0771
CWE-ID	CWE-61 CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Slackware Linux Operating systems & Components / Operating system
Vendor	Slackware

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Incorrect ACL get/set allowed on symlink path

EUVDB-ID: #VU242

Risk: Medium

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2015-7560

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

Exploit availability: No

Description

The vulnerability allows a remote attacker to launch a symlink attack.

The vulnerability exists in Samba. A remote authenticated attacker can overwrite access control lists on the directory by creating a symbolic link to a file or directory using SMB1 UNIX extensions and then issuing a non-UNIX SMB1.

Successful exploitation of this vulnerability may result in a symlink attack.

Mitigation

Update the affected package samba.

Vulnerable software versions

Slackware Linux: 14.1

External links

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.357003

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU32319