CVE:CVE-2019-3870
CNNVD:CNNVD-201904-308
Samba是Samba团队的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba中存在安全漏洞，该漏洞源于程序将private/目录下的文件创建成为全局可写入。攻击者可利用该漏洞提升权限。
solution:Upgrade samba samba to a higher version than 4.9.6,4.10.2,and avoid the version [4.9.0,4.9.6),[4.10.0,4.10.2); Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade synology directory_server to a higher version than -; Upgrade synology diskstation_manager to a higher version than 5.2,6.1,6.2,and avoid the version 5.2,6.1,6.2; Upgrade synology router_manager to a higher version than 1.2,and avoid the version 1.2; Upgrade synology skynas_firmware to a higher version than -; Upgrade synology vs960hd_firmware to a higher version than 2.3.6-1720,and avoid the version (,2.3.6-1720)