| Package | Affected versions | Patched versions |
|---|---|---|
| samba | = 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.14= 3.6.15= 3.6.16= 3.6.17= 3.6.18= 3.6.19= 3.6.20= 3.6.21= 3.6.22= 3.6.23= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.1.7≥ 3.6.6, < 3.6.25≥ 4.0.0, < 4.0.18≥ 4.1.0, < 4.1.8 | 3.6.254.0.184.1.8 |
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memory via a (1) FSCTL_GET_SHADOW_COPY_DATA or (2) FSCTL_SRV_ENUMERATE_SNAPSHOTS request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free