CVE-2015-7698: OS Command Injection
icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the (1) listShares function in Server.php or the (2) connect or (3) read function in Share.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7698?
CVE-2015-7698 is considered a critical vulnerability as it allows remote authenticated users to execute arbitrary commands.
How do I fix CVE-2015-7698?
To fix CVE-2015-7698, upgrade the SMB library to version 1.0.3 or later, or ensure that your ownCloud instance is updated to version 8.1.2 or later.
Which versions are affected by CVE-2015-7698?
CVE-2015-7698 affects the SMB library versions prior to 1.0.3 and ownCloud versions prior to 8.1.2.
What does CVE-2015-7698 allow attackers to do?
CVE-2015-7698 allows attackers to exploit the vulnerability to execute arbitrary SMB commands by injecting shell metacharacters.
Who is at risk from CVE-2015-7698?
Remote authenticated users of affected ownCloud and SMB software versions are at risk from CVE-2015-7698.