Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-5252
HistoryDec 16, 2015 - 12:00 a.m.

CVE-2015-5252

2015-12-1600:00:00
ubuntu.com
ubuntu.com
21

0.013 Low

EPSS

Percentile

85.6%

JSON

vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and
4.3.x before 4.3.3, when share names with certain substring relationships
exist, allows remote attackers to bypass intended file-access restrictions
via a symlink that points outside of a share.

Bugs

Notes

Author Note
mdeslaur says 3.0.0 to 4.3.2 3.6 patch in upstream bug original patch introduced a regression, see usn-2855-2
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchsamba< 2:3.6.3-2ubuntu2.13UNKNOWN
ubuntu14.04noarchsamba< 2:4.1.6+dfsg-1ubuntu2.14.04.11UNKNOWN
ubuntu15.04noarchsamba< 2:4.1.13+dfsg-4ubuntu3.1UNKNOWN
ubuntu15.10noarchsamba< 2:4.1.17+dfsg-4ubuntu3.1UNKNOWN
ubuntu16.04noarchsamba< 2:4.3.3+dfsg-1ubuntu1UNKNOWN
ubuntu16.10noarchsamba< 2:4.3.3+dfsg-1ubuntu1UNKNOWN
ubuntu17.04noarchsamba< 2:4.3.3+dfsg-1ubuntu1UNKNOWN

Related

checkpoint_advisories 1
veracode 5
ibm 2
cve 1
cvelist 1
openvas 30
debiancve 1
samba 1
prion 1
f5 2
nessus 37
debian 5
redhat 5
suse 10
osv 3
centos 3
oraclelinux 4
amazon 1
mageia 1
altlinux 4
ubuntu 2
freebsd 1
gentoo 1
oracle 1
checkpoint_advisories
checkpoint_advisories
Samba smbd Daemon Symlink Verification Information Disclosure (CVE-2015-5252)
2016-01-14 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 09:09:27
Denial Of Service (DoS)
2019-05-02 05:20:19
Improper Access Control
2019-05-02 05:20:18
ibm
ibm
Security Bulletin: Vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2015-5252)
2018-08-01 21:08:41
Security Bulletin: Vulnerabilities in Samba affect IBM i
2019-12-18 14:26:38
cve
cve
CVE-2015-5252
2015-12-29 22:59:00
cvelist
cvelist
CVE-2015-5252
2015-12-29 22:00:00
openvas
openvas
Samba 3.0.0 <= 4.3.2 Bypass File-Access Restrictions Vulnerability (CVE-2015-5252)
2021-09-24 00:00:00
RedHat Update for samba RHSA-2016:0011-01
2016-01-08 00:00:00
Debian: Security Advisory (DLA-379-1)
2023-03-08 00:00:00
debiancve
debiancve
CVE-2015-5252
2015-12-29 22:59:00
samba
samba
Insufficient symlink verification in smbd.
2015-12-16 00:00:00
prion
prion
Design/Logic Flaw
2015-12-29 22:59:00
f5
f5
SOL76314525 - Samba vulnerabilities CVE-2015-5252 and CVE-2015-5299
2016-10-23 00:00:00
K76314525 : Samba vulnerabilities CVE-2015-5252 and CVE-2015-5299
2016-10-23 00:00:00
nessus
nessus
CentOS 6 : samba (CESA-2016:0011)
2016-01-08 00:00:00
Oracle Linux 6 : samba (ELSA-2016-0011)
2016-01-08 00:00:00
Debian DSA-3514-1 : samba - security update
2016-03-14 00:00:00
debian
debian
[SECURITY] [DSA 3514-1] samba security update
2016-03-12 07:24:10
[SECURITY] [DSA 3514-1] samba security update
2016-03-12 07:23:52
[SECURITY] [DLA 379-1] samba security update
2016-01-03 15:25:59
redhat
redhat
(RHSA-2016:0011) Moderate: samba security update
2016-01-07 00:00:00
(RHSA-2016:0016) Moderate: samba security update
2016-01-08 10:10:45
(RHSA-2016:0010) Moderate: samba4 security update
2016-01-07 00:00:00
suse
suse
Security update for samba (important)
2016-04-19 21:07:47
Security update for samba (important)
2016-01-19 13:11:48
Security update for samba (important)
2016-01-05 20:14:05
osv
osv
samba - security update
2016-03-12 00:00:00
samba - security update
2016-01-03 00:00:00
samba - security update
2016-01-02 00:00:00
centos
centos
libsmbclient, samba security update
2016-01-07 22:10:57
samba4 security update
2016-01-07 22:12:25
ctdb, libsmbclient, libwbclient, samba security update
2016-01-07 22:29:50
oraclelinux
oraclelinux
samba security update
2016-01-07 00:00:00
samba security update
2016-01-07 00:00:00
samba4 security update
2016-01-07 00:00:00
amazon
amazon
Medium: samba
2016-01-18 11:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2016-03-03 20:43:41
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.3.3-alt1
2015-12-16 00:00:00
Security fix for the ALT Linux 8 package samba-DC version 4.3.3-alt1
2015-12-16 00:00:00
Security fix for the ALT Linux 8 package samba version 4.3.3-alt1
2015-12-16 00:00:00
ubuntu
ubuntu
Samba regression
2016-02-16 00:00:00
Samba vulnerabilities
2016-01-05 00:00:00
freebsd
freebsd
samba -- multiple vulnerabilities
2015-12-16 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2016-12-24 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00

0.013 Low

EPSS

Percentile

85.6%

JSON
Related for UB:CVE-2015-5252
checkpoint_advisories1veracode5ibm2cve1cvelist1openvas30debiancve1samba1prion1f52nessus37debian5redhat5suse10osv3centos3oraclelinux4amazon1mageia1altlinux4ubuntu2freebsd1gentoo1oracle1