Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Samba 安全漏洞
Vulnerability Description
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。 Samba中存在安全漏洞，当启用vfs shadow副本配置时，程序没有正确初始化SRV_SNAPSHOT_ARRAY响应字段。远程攻击者可通过发送FSCTL_GET_SHADOW_COPY_DATA或FSCTL_SRV_ENUMERATE_SNAPSHOTS请求利用该漏洞获取进程内存中的敏感信息。以下版本受到影响：Samba 3
CVSS Information
N/A
Vulnerability Type
N/A