vulnerability
FreeBSD: VID-145A3E17-CEA2-11E9-81E2-005056A311D1 (CVE-2019-10197): samba -- combination of parameters and permissions can allow user to escape from the share path definition
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | Sep 1, 2019 | Sep 4, 2019 | Sep 17, 2019 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Sep 1, 2019
Added
Sep 4, 2019
Modified
Sep 17, 2019
Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.
From VID-145A3E17-CEA2-11E9-81E2-005056A311D1:
The samba project reports:
On a Samba SMB server for all versions of Samba from 4.9.0 clients are
able to escape outside the share root directory if certain
configuration parameters set in the smb.conf file.
Solution
freebsd-upgrade-package-samba410
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.