A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
07 Nov 2023, 03:10
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-04-09 16:29
Updated : 2024-02-28 17:08
NVD link : CVE-2019-3880
Mitre link : CVE-2019-3880
CVE.ORG link : CVE-2019-3880
JSON object : View
Products Affected
redhat
- enterprise_linux
- gluster_storage
opensuse
- leap
samba
- samba
debian
- debian_linux
fedoraproject
- fedora
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')