{"id":"CVE-2015-7560","details":"The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.","modified":"2026-04-16T06:18:45.281945496Z","published":"2016-03-13T22:59:00Z","related":["SUSE-SU-2016:0814-1","SUSE-SU-2016:0816-1","SUSE-SU-2016:0837-1","SUSE-SU-2016:0905-1","openSUSE-SU-2024:10069-1"],"references":[{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html"},{"type":"ADVISORY","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"},{"type":"ADVISORY","url":"http://www.debian.org/security/2016/dsa-3514"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/84267"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1035220"},{"type":"ADVISORY","url":"http://www.ubuntu.com/usn/USN-2922-1"},{"type":"ADVISORY","url":"https://bugzilla.samba.org/show_bug.cgi?id=11648"},{"type":"ADVISORY","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842"},{"type":"ADVISORY","url":"https://www.samba.org/samba/security/CVE-2015-7560.html"},{"type":"ARTICLE","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.html"},{"type":"ARTICLE","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.html"},{"type":"ARTICLE","url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"},{"type":"ARTICLE","url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"},{"type":"REPORT","url":"https://bugzilla.samba.org/show_bug.cgi?id=11648"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}]}