A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
07 Nov 2023, 03:10
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
29 Aug 2022, 20:02
Type | Values Removed | Values Added |
---|---|---|
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:2099 - Third Party Advisory | |
References | (CONFIRM) https://www.synology.com/security/advisory/Synology_SA_19_15 - Third Party Advisory | |
References | (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3880 - Mitigation, Issue Tracking, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:1966 - Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:1967 - Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:3582 - Third Party Advisory | |
References | (CONFIRM) https://support.f5.com/csp/article/K20804356 - Third Party Advisory |
Information
Published : 2019-04-09 16:29
Updated : 2023-12-10 12:59
NVD link : CVE-2019-3880
Mitre link : CVE-2019-3880
CVE.ORG link : CVE-2019-3880
JSON object : View
Products Affected
redhat
- gluster_storage
- enterprise_linux
samba
- samba
debian
- debian_linux
fedoraproject
- fedora
opensuse
- leap
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')