CVE-2015-3400
N/A
N/A
Summary
sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides world readable access to the shared zfs file system, which might allow remote authenticated users to obtain sensitive information by reading shared files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/74272
- https://github.com/FransUrbo/zfs/commit/99aa4d2b4fd12c6bef62d02ffd1b375ddd42fcf4
- https://github.com/zfsonlinux/zfs/issues/3319
- https://github.com/zfsonlinux/zfs/pull/2790/commits
- http://www.openwall.com/lists/oss-security/2015/04/22/4
References
- http://www.securityfocus.com/bid/74272
- https://github.com/FransUrbo/zfs/commit/99aa4d2b4fd12c6bef62d02ffd1b375ddd42fcf4
- https://github.com/zfsonlinux/zfs/issues/3319
- https://github.com/zfsonlinux/zfs/pull/2790/commits
- http://www.openwall.com/lists/oss-security/2015/04/22/4
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.