Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
CVSS Details
- CVSS 3.1 Base Score: 4.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Smb | — | Apply OS X security update 2009-005 | Dec 16, 2011 | Sep 14, 2009 |
| Centos_linux | — | Upgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Dec 1, 2016 | Sep 14, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2009 |
| Hpux | — | Update CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest version | Aug 11, 2017 | Sep 14, 2009 |
| Oracle_linux | — | Upgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Sep 14, 2009 |
| Samba | — | Upgrade to Samba version 3.3.8Upgrade to Samba version 3.0.37Upgrade to Samba version 3.4.2Upgrade to Samba version 3.2.15 | Nov 13, 2013 | Sep 14, 2009 |
| Suse | — | Upgrade libndr-standard0Upgrade libnetapi0-32bitUpgrade libpdb0Upgrade libsmbldap0Upgrade libtalloc1Upgrade libtdb-develUpgrade libtalloc1-x86Upgrade libsmbclient-develUpgrade libsamba-hostconfig0-32bitUpgrade ldapsmbUpgrade samba-krb-printingUpgrade samba-toolUpgrade libtevent-util0Upgrade libnetapi-develUpgrade libsmbldap2Upgrade libtalloc2-32bitUpgrade samba-clientUpgrade libndr-nbt-develUpgrade python3-ldbUpgrade libsmbclient-raw-develUpgrade libdcerpc0Upgrade samba-x86Upgrade samba-winbind-32bitUpgrade samba-ad-dcUpgrade pam_cifscredsUpgrade libsmbclient0-32bitUpgrade libtdb1Upgrade libsmbconf-develUpgrade libsamdb0Upgrade samba-client-32bitUpgrade samba-docUpgrade libsamba-errors0Upgrade libregistry0Upgrade libsamba-passdb0Upgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc0-32bitUpgrade samba-gpupdateUpgrade libsamba-util0Upgrade libsmbclient0Upgrade samba-dcerpcUpgrade cifs-mountUpgrade libndr-standard-develUpgrade libldb2Upgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade libsamba-policy-develUpgrade libregistry-develUpgrade libndr0-32bitUpgrade samba-libs-python3-32bitUpgrade libldb-develUpgrade libsamba-credentials-develUpgrade libtdb1-32bitUpgrade libsamba-util-develUpgrade libwbclient0Upgrade libsmbsharemodes0Upgrade libwbclient-develUpgrade libndr-nbt0Upgrade samba-client-x86Upgrade samba-kdcUpgrade samba-ad-dc-libsUpgrade ctdb-pcp-pmdaUpgrade libsamdb0-32bitUpgrade libtevent-develUpgrade libndr-krb5pac0-32bitUpgrade samba-libsUpgrade libdcerpc-atsvc-develUpgrade samba-python3Upgrade wb-cifs-idmap-pluginUpgrade libsmbconf0-32bitUpgrade libdcerpc-binding0-32bitUpgrade libpdb-develUpgrade samba-testUpgrade libsmbclient0-x86Upgrade libndr-krb5pac-develUpgrade libndr-krb5pac0Upgrade libsamba-passdb0-32bitUpgrade libsmbclient-raw0Upgrade samba-winbindUpgrade libsmbconf0Upgrade libsmbclient-raw0-32bitUpgrade libdcerpc-develUpgrade libsamba-hostconfig-develUpgrade libtalloc2Upgrade samba-winbind-libs-langUpgrade libsmbsharemodes-develUpgrade libndr-standard0-32bitUpgrade libtevent0Upgrade libsmbldap0-32bitUpgrade libdcerpc-samr0Upgrade libtalloc2-x86Upgrade samba-core-develUpgrade samba-develUpgrade libwbclient0-32bitUpgrade sambaUpgrade ldb-toolsUpgrade libgensec-develUpgrade cifs-utilsUpgrade samba-winbind-x86Upgrade libdcerpc-atsvc0Upgrade libldb1Upgrade libtalloc-develUpgrade libnetapi0Upgrade samba-32bitUpgrade ctdbUpgrade libndr-develUpgrade libsmbldap2-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-util0-32bitUpgrade cifs-utils-develUpgrade libtevent0-x86Upgrade libpdb0-32bitUpgrade libtalloc1-32bitUpgrade libtevent0-32bitUpgrade libsamba-hostconfig0Upgrade libgensec0-32bitUpgrade samba-libs-python3Upgrade samba-client-langUpgrade samba-client-libsUpgrade libsamba-passdb-develUpgrade libsmbldap-develUpgrade libdcerpc-binding0Upgrade samba-winbind-libsUpgrade libsamba-credentials0Upgrade libwbclient0-x86Upgrade libndr0Upgrade samba-ldb-ldapUpgrade samba-test-develUpgrade libtdb1-x86Upgrade samba-libs-32bitUpgrade libndr-nbt0-32bitUpgrade libsamba-policy0Upgrade libsamba-errors-develUpgrade samba-pythonUpgrade libtevent-util0-32bitUpgrade libgensec0Upgrade libtevent-util-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade sambaUpgrade smbclientUpgrade smbfs | Nov 8, 2024 | Sep 14, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Sep 14, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub