A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2019-04-09 16:29
Updated : 2024-02-04 20:20
NVD link : CVE-2019-3880
Mitre link : CVE-2019-3880
CVE.ORG link : CVE-2019-3880
JSON object : View
Products Affected
redhat
- gluster_storage
- enterprise_linux
debian
- debian_linux
samba
- samba
opensuse
- leap
fedoraproject
- fedora
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')