DEBIAN-CVE-2015-7560

DEBIAN-CVE-2015-7560 PUBLISHED CVSS 6.5 MEDIUM

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:14	samba	0, 0, 0
Debian:13	samba	0, 0, 0
Debian:12	samba	0, 0, 0
Debian:11	samba	0, 0, 0

Timeline

Mar 13, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2015-7560 advisory

Open in Interactive Console →