[Bug 1545750] Re: Access denied if the share path is "/"

Dariusz Gadomski 1545750 at bugs.launchpad.net
Mon Feb 15 15:19:57 UTC 2016


** Tags added: sts

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1545750

Title:
  Access denied if the share path is "/"

Status in samba:
  Unknown
Status in samba package in Ubuntu:
  New

Bug description:
  The fix for bug #11395 / CVE-2015-5252 
  https://git.samba.org/?p=samba.git;a=commitdiff;h=7606c0db257b3f9d84da5b2bf5fbb4034cc8d77d
  locked down the path checks in check_reduced_name[_with_privilege]() to prevent unintended access via wide links.

  The new checks do not correctly treat a corner case though: the case
  of the share path being "/". (Important e.g. for using the glusterfs
  VFS module.)

  In this case all operations after tree connect get ACCESS_DENIED.

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1545750/+subscriptions



More information about the foundations-bugs mailing list