Vulnerability Description
icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the (1) listShares function in Server.php or the (2) connect or (3) read function in Share.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Owncloud | Smb | <= 1.0.2 |
| Owncloud | Owncloud | <= 8.1.1 |
Related Weaknesses (CWE)
References
- https://github.com/icewind1991/SMB/commit/33ab10cc4d5c3e48cba3a074b5f9fc67590cd0Vendor Advisory
- https://owncloud.org/security/advisory/?id=oc-sa-2015-017
- https://github.com/icewind1991/SMB/commit/33ab10cc4d5c3e48cba3a074b5f9fc67590cd0Vendor Advisory
- https://owncloud.org/security/advisory/?id=oc-sa-2015-017
FAQ
What is CVE-2015-7698?
CVE-2015-7698 is a vulnerability with a CVSS score of 9.0 (HIGH). icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the (1) listShares function in Server.php or the (2) c...
How severe is CVE-2015-7698?
CVE-2015-7698 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-7698?
Check the references section above for vendor advisories and patch information. Affected products include: Owncloud Smb, Owncloud Owncloud.