CVE:CVE-2019-3880
CNNVD:CNNVD-201904-305
Samba是Samba团队的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba 4.8.11之前版本、4.9.6之前版本和4.10.2之前版本中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade samba samba to a higher version than 4.8.11,4.9.6,4.10.2,and avoid the version [3.2.0,4.8.11),[4.9.0,4.9.6),[4.10.0,4.10.2); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat gluster_storage to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade opensuse leap to a higher version than 42.3,and avoid the version 42.3