| commit | 14d48130870579541c07f5a0f64638e635ddce95 | |
| author | Jeremy Allison <jra@samba.org> | |
| Thu, 31 Oct 2013 20:48:42 +0000 (31 13:48 -0700) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Thu, 7 Nov 2013 10:51:26 +0000 (7 11:51 +0100) | ||
| tree | 583d5846ab64a649bdb4eb8230ff39da547a8d9e | treesnapshot (tar.gz zip) |
| parent | c18329beeaf19f95b85ab3de8a1b0b223c79de5e | commitdiff |
Fix bug #10229 - No access check verification on stream files.
https://bugzilla.samba.org/show_bug.cgi?id=10229
We need to check if the requested access mask
could be used to open the underlying file (if
it existed), as we're passing in zero for the
access mask to the base filename.
Signed-off-by: Jeremy Allison <jra@samba.org>
Fix Bug #10235 - CVE-2013-4475: No access check verification on stream files.
https://bugzilla.samba.org/show_bug.cgi?id=10235
https://bugzilla.samba.org/show_bug.cgi?id=10229
We need to check if the requested access mask
could be used to open the underlying file (if
it existed), as we're passing in zero for the
access mask to the base filename.
Signed-off-by: Jeremy Allison <jra@samba.org>
Fix Bug #10235 - CVE-2013-4475: No access check verification on stream files.
https://bugzilla.samba.org/show_bug.cgi?id=10235
| source3/smbd/open.c | diffblobblamehistory |