CVE-2019-9579

CVE-2019-9579 affects Illumos-based NexentaStor (4.0.5, 5.1.2) and related products. The SMB server allows unintended access via a combination of ZFS extended attributes used for NT named streams, SMB open-handle semantics, and the server passing certain attribute requests to the underlying objec...

CVE-2019-9579: Incorrect Default Permissions

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

PT-2019-4525 · Illumos +1 · Illumos +1

Name of the Vulnerable Software and Affected Versions: Nexenta NexentaStor versions 4.0.5 through 5.1.2 Illumos affected versions not specified Description: The issue allows an attacker to have unintended access, for example, an attacker with WRITE XATTR can change permissions. This occurs due to...