CVE-2015-7560

The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by using a UNIX SMB1 call to create a symlink, and then using a non-UNIX SMB1 call to write to the ACL content.

• CWE-284

• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3514Third Party Advisory
• http://www.securityfocus.com/bid/84267Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035220Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2922-1Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=11648Issue Tracking, Vendor Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842Third Party Advisory
• https://www.samba.org/samba/security/CVE-2015-7560.htmlVendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178730.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178764.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00064.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00065.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00081.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00090.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00092.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3514Third Party Advisory
• http://www.securityfocus.com/bid/84267Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035220Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2922-1Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=11648Issue Tracking, Vendor Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05121842Third Party Advisory
• https://www.samba.org/samba/security/CVE-2015-7560.htmlVendor Advisory

Published

Mar 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7554The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 al…
• CVE-2015-7555Heap-based buffer overflow in giffix.c in giffix in giflib 5…
• CVE-2015-7556DeleGate 9.9.13 allows local users to gain privileges as dem…7.8
• CVE-2015-7557The _rsvg_node_poly_build_path function in rsvg-shapes.c in …
• CVE-2015-7558librsvg before 2.40.12 allows context-dependent attackers to…
• CVE-2015-7559It was found that the Apache ActiveMQ client before 5.14.5 e…2.7
• CVE-2015-7561Kubernetes in OpenShift3 allows remote authenticated users t…
• CVE-2015-7562Multiple cross-site scripting (XSS) vulnerabilities in TeamP…
• CVE-2015-7563Cross-site request forgery (CSRF) vulnerability in TeamPass …8.8
• CVE-2015-7564Multiple SQL injection vulnerabilities in TeamPass 2.1.24 an…
• CVE-2015-7565Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x t…
• CVE-2015-7566The clie_5_attach function in drivers/usb/serial/visor.c in …