Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-2619. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a race condition in Samba 4.5.2 where an attacker can replace path components with symlinks to access files outside the configured share directory. The PoC involves a race between renaming a symlink and accessing a file, potentially leaking sensitive data.
Description
Samba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a symlink race to allow access to areas of the server file system not exported under the share definition.
Exploits (1)
This exploit demonstrates a race condition in Samba 4.5.2 where an attacker can replace path components with symlinks to access files outside the configured share directory. The PoC involves a race between renaming a symlink and accessing a file, potentially leaking sensitive data.
References (11)
Scores
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H