---
title: "CVE-2015-7698\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2015-7698?format=md
keywords: index, follow
---

# CVE-2015-7698

Publication date 21 October 2015

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute
arbitrary SMB commands via shell metacharacters in the user argument in the
(1) listShares function in Server.php or the (2) connect or (3) read
function in Share.php.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2015-7698?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| owncloud | 15.10 wily | Not in release |
| 15.04 vivid | Not in release |
| 14.04 LTS trusty | Not in release |
| 12.04 LTS precise | Not affected |
| php-smb | 15.10 wily | Not affected |
| 15.04 vivid | Not in release |
| 14.04 LTS trusty | Not in release |
| 12.04 LTS precise | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [mdeslaur](https://launchpad.net/~mdeslaur)

owncloud packages in Ubuntu are now empty

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7698)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2015-7698)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2015-7698)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2015-7698)

### Other references

* <https://owncloud.org/security/advisory/?id=oc-sa-2015-017>
* <https://www.cve.org/CVERecord?id=CVE-2015-7698>