Test ID:	1.3.6.1.4.1.25623.1.0.147401
Category:	General
Title:	Samba Symlink Race Vulnerability (CVE-2021-20316)
Summary:	Samba is prone to a symlinc race vulnerability which can allow; metadata read and modify outside of the exported share.
Description:	Summary: Samba is prone to a symlinc race vulnerability which can allow metadata read and modify outside of the exported share. Vulnerability Insight: A malicious client can use a symlink race to access or modify file or directory metadata information outside of the exported share. The user must have permissions to read or write the metadata on the accessed file or directory. Affected Software/OS: Samba prior to version 4.15.0. Solution: Update to version 4.15.0 or later. CVSS Score: 6.6 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-20316 https://security.gentoo.org/glsa/202309-06 https://access.redhat.com/security/cve/CVE-2021-20316 https://bugzilla.redhat.com/show_bug.cgi?id=2009673 https://bugzilla.samba.org/show_bug.cgi?id=14842 https://security-tracker.debian.org/tracker/CVE-2021-20316 https://www.samba.org/samba/security/CVE-2021-20316.html
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.