CVE-2015-3400

sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides world readable access to the shared zfs file system, which might allow remote authenticated users to obtain sensitive information by reading shared files.

• CWE-200

• http://www.openwall.com/lists/oss-security/2015/04/22/4Mailing List, VDB Entry
• http://www.securityfocus.com/bid/74272Third Party Advisory, VDB Entry
• https://github.com/FransUrbo/zfs/commit/99aa4d2b4fd12c6bef62d02ffd1b375ddd42fcf4Patch, Third Party Advisory
• https://github.com/zfsonlinux/zfs/issues/3319Third Party Advisory
• https://github.com/zfsonlinux/zfs/pull/2790/commitsPatch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/04/22/4Mailing List, VDB Entry
• http://www.securityfocus.com/bid/74272Third Party Advisory, VDB Entry
• https://github.com/FransUrbo/zfs/commit/99aa4d2b4fd12c6bef62d02ffd1b375ddd42fcf4Patch, Third Party Advisory
• https://github.com/zfsonlinux/zfs/issues/3319Third Party Advisory
• https://github.com/zfsonlinux/zfs/pull/2790/commitsPatch, Third Party Advisory

Published

Oct 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3390Cross-site scripting (XSS) vulnerability in the Facebook Alb…
• CVE-2015-3391The Path Breadcrumbs module before 7.x-3.2 for Drupal allows…
• CVE-2015-3392Cross-site scripting (XSS) vulnerability in the Ajax Timelin…
• CVE-2015-3393Open redirect vulnerability in the Commerce WeDeal module be…
• CVE-2015-3395The msrle_decode_pal4 function in msrledec.c in Libav before…
• CVE-2015-3397Cross-site scripting (XSS) vulnerability in Yii Framework be…
• CVE-2015-3404The Certify module before 6.x-2.3 for Drupal does not proper…
• CVE-2015-3405ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x befor…
• CVE-2015-3406The PGP signature parsing in Module::Signature before 0.74 a…7.5
• CVE-2015-3407Module::Signature before 0.74 allows remote attackers to byp…
• CVE-2015-3408Module::Signature before 0.74 allows remote attackers to exe…
• CVE-2015-3409Untrusted search path vulnerability in Module::Signature bef…