Permissions, Privileges, and Access Controls in Samba - CVE-2015-5252
Published: December 30, 2015 / Updated: July 28, 2020
Vulnerability identifier: #VU32347
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-5252
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
Affected software
Samba
Amazon Linux AMI
SUSE Linux
Opensuse
samba (Alpine package)
HP-UX Common Internet File System (CIFS)
Amazon Linux AMI
SUSE Linux
Opensuse
samba (Alpine package)
HP-UX Common Internet File System (CIFS)
How to mitigate CVE-2015-5252
Install update from vendor's website.
Samba - addressed in versions 4.1.22, 4.2.7, 4.3.3
samba (Alpine package) - update to 4.2.7-r0
HP-UX Common Internet File System (CIFS) - update to 03.02.04
samba (Alpine package) - update to 4.2.7-r0
HP-UX Common Internet File System (CIFS) - update to 03.02.04
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174076.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174391.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00033.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html
- http://www.debian.org/security/2016/dsa-3433
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/79733
- http://www.securitytracker.com/id/1034493
- http://www.ubuntu.com/usn/USN-2855-1
- http://www.ubuntu.com/usn/USN-2855-2
- https://bugzilla.redhat.com/show_bug.cgi?id=1290288
- https://git.samba.org/?p=samba.git;a=commit;h=4278ef25f64d5fdbf432ff1534e275416ec9561e
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05115993
- https://security.gentoo.org/glsa/201612-47
- https://www.samba.org/samba/security/CVE-2015-5252.html
Related Security Bulletins
- Permissions, Privileges, and Access Controls in Samba
- SUSE Linux update for samba
- SUSE Linux update for samba
- SUSE Linux update for samba
- OpenSUSE Linux update for ldb, samba, talloc, tdb, tevent
- SUSE Linux update for ldb, samba, talloc, tdb, tevent
- SUSE Linux update for ldb, samba, talloc, tdb, tevent
- Permissions, Privileges, and Access Controls in samba (Alpine package)
- Amazon Linux AMI update for samba
- Multiple vulnerabilities in HPE HP-UX CIFS-Server (Samba)