description: Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
problem types: CWE-362
affected:
{
product: samba
vendor: Samba
versions:
status: affected, version: 4.6.1
status: affected, version: 4.5.7
status: affected, version: 4.4.11
}