PT-2017-6667 · Sharenfs · Sharenfs

Ggzengel · Publicado 2017-10-18 · Atualizado 2017-11-08 · CVE-2015-3400

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions sharenfs version 0.6.4

Description The issue allows remote authenticated users to potentially obtain sensitive information by reading shared files due to world-readable access to the shared zfs file system.

Recommendations For sharenfs version 0.6.4, consider restricting access to the shared zfs file system to prevent unauthorized reading of sensitive files until a proper fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-3400

Produtos afetados

Sharenfs

Referências · 6

• https://github.com/zfsonlinux/zfs/issues/3319 · Nota
• https://github.com/zfsonlinux/zfs/pull/2790/commits · Correção
• https://github.com/FransUrbo/zfs/commit/99aa4d2b4fd12c6bef62d02ffd1b375ddd42fcf4 · Correção
• http://securityfocus.com/bid/74272 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-3400 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/04/22/4 · Nota