Lucene search

CVE-2015-5252

🗓️ 29 Dec 2015 22:01:59Reported by redhatType

cve🔗 web.nvd.nist.gov👁 162 Views🌐 2 Media mentions

Samba 3.x and 4.x before 4.3.3 allows bypass of file-access restrictions via symlink

Reporter	Title	Published	Views	Family All 134
Check Point Advisories	Samba smbd Daemon Symlink Verification Information Disclosure (CVE-2015-5252)	14 Jan 201600:00	–	checkpoint_advisories
IBM Security Bulletins	Security Bulletin: Vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2015-5252)	1 Aug 201821:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Samba affect IBM i	18 Dec 201914:26	–	ibm
UbuntuCve	CVE-2015-5252	16 Dec 201500:00	–	ubuntucve
Veracode	Authorization Bypass	15 Jan 201909:09	–	veracode
Veracode	Improper Authentication	2 May 201905:20	–	veracode
Veracode	Information Disclosure	2 May 201905:20	–	veracode
Veracode	Improper Access Control	2 May 201905:20	–	veracode
Veracode	Denial Of Service (DoS)	2 May 201905:20	–	veracode
Cvelist	CVE-2015-5252	29 Dec 201522:00	–	cvelist

Nvd

Node

samba sambaRange3.0.0–4.1.22

samba sambaRange4.2.0–4.2.7

samba sambaRange4.3.0–4.3.3

Node

canonical ubuntu_linuxMatch12.04-

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch15.04

canonical ubuntu_linuxMatch15.10

Node

debian debian_linuxMatch7.0

debian debian_linuxMatch8.0

Source	Link
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
oracle	www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
securitytracker	www.securitytracker.com/id/1034493
git	www.git.samba.org/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
oracle	www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
lists	www.lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html
ubuntu	www.ubuntu.com/usn/USN-2855-2
debian	www.debian.org/security/2016/dsa-3433
security	www.security.gentoo.org/glsa/201612-47

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Dec 2015 22:59Current

6.3Medium risk

Vulners AI Score6.3

CVSS25

CVSS37.2

EPSS0.011

CWE-264