CVE-2017-2619CWE-362

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not…

published March 12, 2018

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11109 · 95.9th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2018-03-12T15:00Z
EPSS history
Timeline
  • 12 MAR 15:00Z
    Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not…
    cvelistv5