Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
CVSS Details
- CVSS 3.1 Base Score: 4.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Smb | — | Apply OS X security update 2009-005 | Dec 16, 2011 | Sep 14, 2009 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade samba-swatUpgrade samba | Dec 1, 2016 | Sep 14, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2009 |
| Hpux | — | Update CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest version | Aug 11, 2017 | Sep 14, 2009 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Sep 14, 2009 |
| Samba | — | Upgrade to Samba version 3.3.8Upgrade to Samba version 3.4.2Upgrade to Samba version 3.2.15Upgrade to Samba version 3.0.37 | Nov 13, 2013 | Sep 14, 2009 |
| Suse | — | Upgrade samba-testUpgrade libsmbldap0-32bitUpgrade libtalloc2-x86Upgrade libpdb-develUpgrade libtdb1-x86Upgrade ldb-toolsUpgrade libdcerpc-binding0Upgrade libtalloc1-32bitUpgrade libtevent-util-develUpgrade libsmbclient0-x86Upgrade libwbclient0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libndr-krb5pac-develUpgrade samba-ldb-ldapUpgrade wb-cifs-idmap-pluginUpgrade libgensec0Upgrade libndr-standard0-32bitUpgrade samba-libs-python3Upgrade libgensec0-32bitUpgrade libsamba-errors-develUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libtevent0Upgrade samba-client-libsUpgrade libndr0Upgrade libsmbldap-develUpgrade libsamba-hostconfig-develUpgrade libdcerpc-atsvc0Upgrade samba-core-develUpgrade libnetapi0Upgrade samba-python3Upgrade libsmbclient-raw0Upgrade samba-dsdb-modulesUpgrade libldb1Upgrade libtevent-develUpgrade samba-libsUpgrade libsamba-passdb-develUpgrade samba-winbind-x86Upgrade samba-winbindUpgrade libndr-krb5pac0Upgrade libsmbconf0Upgrade samba-develUpgrade cifs-utilsUpgrade libgensec-develUpgrade samba-32bitUpgrade sambaUpgrade libsmbconf0-32bitUpgrade cifs-utils-develUpgrade libsamba-hostconfig0Upgrade libsmbsharemodes-develUpgrade libwbclient0-x86Upgrade libtevent0-x86Upgrade samba-winbind-libsUpgrade libndr-krb5pac0-32bitUpgrade samba-client-langUpgrade libtevent0-32bitUpgrade libpdb0-32bitUpgrade libndr-develUpgrade libsamba-util0-32bitUpgrade libtalloc-develUpgrade libsmbclient-raw0-32bitUpgrade libsamba-policy0Upgrade samba-winbind-libs-langUpgrade libtalloc2Upgrade samba-libs-32bitUpgrade samba-pythonUpgrade samba-test-develUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0Upgrade libtevent-util0-32bitUpgrade libdcerpc-atsvc-develUpgrade ctdbUpgrade libdcerpc-develUpgrade libregistry0Upgrade samba-ad-dc-libsUpgrade libpdb0Upgrade samba-krb-printingUpgrade libtevent-util0Upgrade libsamdb0Upgrade libtalloc1Upgrade pam_cifscredsUpgrade libsmbldap0Upgrade libtalloc1-x86Upgrade libsamba-passdb0Upgrade libregistry-develUpgrade libsamdb-develUpgrade libsmbsharemodes0Upgrade samba-docUpgrade samba-client-32bitUpgrade libsamba-util-develUpgrade libsamdb0-32bitUpgrade libsmbclient0-32bitUpgrade libtdb1Upgrade libwbclient0Upgrade python3-ldbUpgrade libwbclient-develUpgrade libndr-nbt0Upgrade libndr-standard-develUpgrade libsamba-credentials0-32bitUpgrade samba-ad-dcUpgrade libsmbldap2Upgrade libldb2Upgrade libdcerpc0-32bitUpgrade samba-winbind-32bitUpgrade libsamba-policy-develUpgrade libsmbconf-develUpgrade samba-x86Upgrade libsamba-errors0Upgrade libndr0-32bitUpgrade samba-kdcUpgrade libdcerpc-samr-develUpgrade ldapsmbUpgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-toolUpgrade libtalloc2-32bitUpgrade libnetapi-develUpgrade libsamba-errors0-32bitUpgrade libtdb1-32bitUpgrade libsmbclient-develUpgrade samba-clientUpgrade ctdb-pcp-pmdaUpgrade libsmbclient0Upgrade samba-libs-python3-32bitUpgrade libndr-nbt-develUpgrade libsamba-credentials-develUpgrade samba-gpupdateUpgrade libsmbclient-raw-develUpgrade libndr-standard0Upgrade samba-client-x86Upgrade libsamba-util0Upgrade samba-dcerpcUpgrade libdcerpc0Upgrade libnetapi0-32bitUpgrade cifs-mountUpgrade libtdb-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbclientUpgrade sambaUpgrade smbfs | Nov 8, 2024 | Sep 14, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Sep 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub