Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and possibly other products, does not properly enforce CIFS share attributes, which allows remote authenticated users to (1) write to a read-only share; (2) trigger data-integrity problems related to the oplock, locking, coherency, or leases attribute; or (3) have an unspecified impact by leveraging incorrect handling of the browseable or "hide unreadable" parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Storwize V7000 Unified CIFS属性处理安全漏洞
Vulnerability Description
IBM Storwize V7000 Unified是美国IBM公司的一套虚拟化存储系统。该系统可提供对存储资源的单点控制、自动优化应用存储性能等功能。 IBM Storwize V7000 Unified 1.3.2.3之前的1.3版本，1.4.0.1之前的1.4版本和其他产品中使用的Samba 3.6.6之前版本中存在漏洞，该漏洞源于程序没有正确强制执行CIFS分享属性。通过程序对可浏览或‘隐藏不可读’参数的不正确处理，远程认证的攻击者利用该漏洞(1)写入只读分享(2)触发与oplock，lockin
CVSS Information
N/A
Vulnerability Type
N/A