Samba 3.0.0 <= 4.3.2 Bypass File-Access Restrictions Vulnerability (CVE-2015-5252)

Insufficient symlink verification could allow data access outside share path.

All versions of Samba from 3.0.0 to 4.3.2 inclusive are vulnerable to a bug in symlink verification, which under certain circumstances could allow client access to files outside the exported share path. If a Samba share is configured with a path that shares a common path prefix with another directory on the file system, the smbd daemon may allow the client to follow a symlink pointing to a file or directory in that other directory, even if the share parameter 'wide links' is set to 'no' (the default).

Samba versions 3.0.0 through 4.1.21, 4.2.0 through 4.2.6 and 4.3.0 through 4.3.2.

Checks if a vulnerable version is present on the target host.

Update to version 4.1.22, 4.2.7, 4.3.3 or later.