vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Samba | Samba | 3.0.0 (including) | 4.1.22 (excluding) |
| Samba | Samba | 4.2.0 (including) | 4.2.7 (excluding) |
| Samba | Samba | 4.3.0 (including) | 4.3.3 (excluding) |