diff options
| author | Timur I. Bakeyev <timur@FreeBSD.org> | 2019-09-03 23:32:13 +0000 |
|---|---|---|
| committer | Timur I. Bakeyev <timur@FreeBSD.org> | 2019-09-03 23:32:13 +0000 |
| commit | 40d0c206a72a9a8b72709b6d23953d66034124e0 (patch) | |
| tree | eb752fb7c4bc499dac617aeed94db86af1c9913a | |
| parent | - cqrlog also needs mysqld which cqrlog was missing as a dependency (diff) | |
Add entry about CVE-2019-10197
On a Samba SMB server for all versions of Samba from 4.9.0 clients are
able to escape outside the share root directory if certain
configuration parameters set in the smb.conf file.
Security: CVE-2019-10197
| -rw-r--r-- | security/vuxml/vuln.xml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 4409155cff3a..168683cef559 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,34 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="145a3e17-cea2-11e9-81e2-005056a311d1"> + <topic>samba -- combination of parameters and permissions can allow user to escape from the share path definition</topic> + <affects> + <package> + <name>samba410</name> + <range><lt>4.10.8</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The samba project reports:</p> + <blockquote cite="https://www.samba.org/samba/security/CVE-2019-10197.html"> + <p>On a Samba SMB server for all versions of Samba from 4.9.0 clients are + able to escape outside the share root directory if certain + configuration parameters set in the smb.conf file.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2019-10197</cvename> + <url>https://www.samba.org/samba/security/CVE-2019-10197.html</url> + </references> + <dates> + <discovery>2019-09-01</discovery> + <entry>2019-09-03</entry> + </dates> + </vuln> + <vuln vid="05463e0a-abd3-4fa4-bd5f-cd5ed132d4c6"> <topic>mozilla -- multiple vulnerabilities</topic> <affects> |