Ubuntu
samba package

  1. Bug #1701073
  2. Comment #8

Comment 8 for bug 1701073

Revision history for this message
Andreas Hasenack (ahasenack) wrote : Re: CVE-2017-2619 regression breaks symlinks

Note: if you use smbclient with -m SMB2, which is what windows7+ uses, you will see the same failure when doing "ls /opt/opt/*":

root@xenial-samba-symlink-1701073:~# smbclient //localhost/cve-root -U ubuntu%ubuntu -c "ls /opt/opt/*"
WARNING: The "syslog" option is deprecated
Domain=[WORKGROUP] OS=[Windows 6.1] Server=[Samba 4.3.11-Ubuntu]
  . D 0 Fri Jun 30 18:51:00 2017
  .. D 0 Fri Jun 30 18:11:18 2017
  smb.conf N 1245 Fri Jun 30 18:50:58 2017
  root D 0 Fri Jun 30 18:11:18 2017
  opt D 0 Fri Jun 30 18:51:00 2017

  246776448 blocks of size 1024. 246351744 blocks available

root@xenial-samba-symlink-1701073:~# smbclient //localhost/cve-root -U ubuntu%ubuntu -c "ls /opt/opt/*" -m SMB2
WARNING: The "syslog" option is deprecated
Domain=[XENIAL] OS=[] Server=[]
NT_STATUS_ACCESS_DENIED listing \opt\opt\*
root@xenial-samba-symlink-1701073:~#

I'm still investigating, I'm not getting the exact errors described in the upstream samba bug. They hint that it may depend on the kernel version as well. I'll stop trying with lxd and use VMs because of that.