mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 09:12:08 +00:00
887 B
887 B
CVE-2019-3880
Description
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.
POC
Reference
- https://www.synology.com/security/advisory/Synology_SA_19_15
- https://www.synology.com/security/advisory/Synology_SA_19_15
Github
No PoCs found on GitHub currently.