Test ID:	1.3.6.1.4.1.25623.1.0.807711
Category:	General
Title:	Samba Overwrite ACLs Vulnerability
Summary:	Samba is prone to an overwrite ACLs vulnerability.
Description:	Summary: Samba is prone to an overwrite ACLs vulnerability. Vulnerability Insight: The flaw exists due to an improper handling of the request, a UNIX SMB1 call, to create a symlink. Vulnerability Impact: Successful exploitation will allow a remote attacker to gain access to an arbitrary file or directory by overwriting its ACL. Affected Software/OS: Samba versions 3.2.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6 and 4.4.x before 4.4.0rc4. Solution: Upgrade to Samba version 4.1.23 or 4.2.9 or 4.3.6 or 4.4.0rc4 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7560 BugTraq ID: 84267 http://www.securityfocus.com/bid/84267 Debian Security Information: DSA-3514 (Google Search) http://www.debian.org/security/2016/dsa-3514 http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html http://www.securitytracker.com/id/1035220 SuSE Security Announcement: SUSE-SU-2016:0814 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html SuSE Security Announcement: SUSE-SU-2016:0816 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html SuSE Security Announcement: SUSE-SU-2016:0837 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html SuSE Security Announcement: SUSE-SU-2016:0905 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html SuSE Security Announcement: openSUSE-SU-2016:0813 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html SuSE Security Announcement: openSUSE-SU-2016:0877 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html SuSE Security Announcement: openSUSE-SU-2016:1064 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:1106 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1107 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html http://www.ubuntu.com/usn/USN-2922-1
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.