Symlink Vulnerability in Samba Affects File System Integrity

CVE-2021-44141

What is CVE-2021-44141?

Samba versions prior to 4.15.5 are vulnerable to a potential attack where a malicious client can leverage server symlinks to access information about files or directories outside the designated server share. This vulnerability requires SMB1 with Unix extensions to be enabled for exploitation, allowing the attacker to discern the existence of files that should be inaccessible under normal circumstances. Proper server configurations and updates are essential to mitigate this risk.

References