PT-2017-4073 · Samba Team+6 · Samba+5

Jann Horn · Published 2017-03-23 · Updated 2024-06-15 · CVE-2017-2619

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.6.1 Samba versions prior to 4.5.7 Samba versions prior to 4.4.11

Description The issue is related to a malicious client using a symlink race to access areas of the server file system not exported under the share definition. It is also associated with concurrent execution using a shared resource with incorrect synchronization, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 4.6.1, update to version 4.6.1 or later. For versions prior to 4.5.7, update to version 4.5.7 or later. For versions prior to 4.4.11, update to version 4.4.11 or later.

Exploit

Fix

Race Condition

Link Following

Weakness Enumeration

CWE-362

CWE-59

Related Identifiers

ALT-PU-2017-1343

ALT-PU-2017-1344

ALT-PU-2018-2488

ALT-PU-2018-2489

BDU:2021-01421

CESA-2017_1265

CESA-2017_2789

CVE-2017-2619

DLA-894-1

DSA-3816-1

DSA-3816-2

ECHO-D748-4F34-4FD4

MGASA-2017-0145

OPENSUSE-SU-2017_0935-1

OPENSUSE-SU-2017_0944-1

OPENSUSE-SU-2024:11365-1

RHSA-2017:1265

RHSA-2017:2338

RHSA-2017:2778

RHSA-2017:2789

RHSA-2017_1265

RHSA-2017_2789

SUSE-RU-2017:1217-1

SUSE-RU-2017:1218-1

SUSE-RU-2017:1219-1

SUSE-SU-2017:0841-1

SUSE-SU-2017:0858-1

SUSE-SU-2017:0859-1

SUSE-SU-2017:0862-1

SUSE-SU-2017:1216-1

SUSE-SU-2017_0841-1

SUSE-SU-2017_0858-1

SUSE-SU-2017_0859-1

SUSE-SU-2017_0862-1

SUSE-SU-2017_1216-1

USN-3242-1

USN-3242-2

USN-3267-1

Affected Products

Alt Linux

Centos

Red Hat

Samba

Suse

Ubuntu

References · 139

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/is_known_pipename.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-7494.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-CVE-2017-7494 · Exploit
• 🔥 https://github.com/joxeankoret/CVE-2017-7494 · Exploit
• 🔥 https://github.com/betab0t/cve-2017-7494 · Exploit
• 🔥 https://github.com/d3fudd/CVE-2017-7494_SambaCry · Exploit
• 🔥 https://github.com/0xm4ud/noSAMBAnoCRY-CVE-2017-7494 · Exploit
• 🔥 https://exploit-db.com/exploits/41740 · Exploit
• 🔥❌ https://github.com/elellacode/exploit-CVE-2017-7494 · Exploit, Deleted
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-2619 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3816-2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2619 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:0841-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2017:1218-1 · Vendor Advisory