PT-2017-4073 · Samba Team+6 · Samba+5

Jann Horn · Publicado 2017-03-23 · Atualizado 2024-06-15 · CVE-2017-2619

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.6.1 Samba versions prior to 4.5.7 Samba versions prior to 4.4.11

Description The issue is related to a malicious client using a symlink race to access areas of the server file system not exported under the share definition. It is also associated with concurrent execution using a shared resource with incorrect synchronization, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 4.6.1, update to version 4.6.1 or later. For versions prior to 4.5.7, update to version 4.5.7 or later. For versions prior to 4.4.11, update to version 4.4.11 or later.

Exploit

Correção

Race Condition

Link Following

Enumeração de Fraquezas

CWE-362

CWE-59

Identificadores relacionados

ALT-PU-2017-1343

ALT-PU-2017-1344

ALT-PU-2018-2488

ALT-PU-2018-2489

BDU:2021-01421

CESA-2017_1265

CESA-2017_2789

CVE-2017-2619

DLA-894-1

DSA-3816-1

DSA-3816-2

ECHO-D748-4F34-4FD4

MGASA-2017-0145

OPENSUSE-SU-2017_0935-1

OPENSUSE-SU-2017_0944-1

OPENSUSE-SU-2024:11365-1

RHSA-2017:1265

RHSA-2017:2338

RHSA-2017:2778

RHSA-2017:2789

RHSA-2017_1265

RHSA-2017_2789

SUSE-RU-2017:1217-1

SUSE-RU-2017:1218-1

SUSE-RU-2017:1219-1

SUSE-SU-2017:0841-1

SUSE-SU-2017:0858-1

SUSE-SU-2017:0859-1

SUSE-SU-2017:0862-1

SUSE-SU-2017:1216-1

SUSE-SU-2017_0841-1

SUSE-SU-2017_0858-1

SUSE-SU-2017_0859-1

SUSE-SU-2017_0862-1

SUSE-SU-2017_1216-1

USN-3242-1

USN-3242-2

USN-3267-1

Produtos afetados

Alt Linux

Centos

Red Hat

Samba

Suse

Ubuntu

Referências · 139

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-7494.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2017-7494 · Exploit
• 🔥 https://github.com/joxeankoret/CVE-2017-7494 · Exploit
• 🔥 https://github.com/betab0t/cve-2017-7494 · Exploit
• 🔥 https://github.com/d3fudd/CVE-2017-7494_SambaCry · Exploit
• 🔥 https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494 · Exploit
• 🔥 https://exploit-db.com/exploits/41740 · Exploit
• 🔥❌ https://github.com/elellacode/exploit-CVE-2017-7494 · Exploit, Deleted
• https://suse.com/security/cve/CVE-2019-12436 · Nota
• https://suse.com/security/cve/CVE-2018-16851 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-2619 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3816-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1050 · Nota
• https://suse.com/security/cve/CVE-2021-20254 · Nota