Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Jan 5, 2009 |
| Suse | — | Upgrade libtalloc2-32bitUpgrade samba-ldb-ldapUpgrade libtevent0-32bitUpgrade ldapsmbUpgrade samba-client-32bitUpgrade libsmbclient0-x86Upgrade cifs-mountUpgrade samba-gpupdateUpgrade libtdb1-x86Upgrade ldb-toolsUpgrade samba-libsUpgrade pam_cifscredsUpgrade libsmbclient0-32bitUpgrade samba-client-x86Upgrade python3-ldbUpgrade libtalloc1Upgrade libldb1Upgrade samba-toolUpgrade samba-testUpgrade samba-clientUpgrade samba-krb-printingUpgrade samba-dsdb-modulesUpgrade samba-winbind-x86Upgrade samba-winbind-libs-langUpgrade libtdb-develUpgrade libsmbsharemodes-develUpgrade libtalloc1-x86Upgrade cifs-utils-develUpgrade libtdb1Upgrade libsmbclient0Upgrade libsmbclient-develUpgrade samba-libs-python3Upgrade samba-ad-dcUpgrade samba-x86Upgrade sambaUpgrade samba-winbind-libsUpgrade libtalloc2-x86Upgrade libldb-develUpgrade ctdb-pcp-pmdaUpgrade samba-python3Upgrade libtalloc2Upgrade libwbclient0Upgrade samba-32bitUpgrade samba-develUpgrade samba-dcerpcUpgrade libtevent-develUpgrade libwbclient0-32bitUpgrade libtalloc-develUpgrade samba-client-libsUpgrade libwbclient-develUpgrade libtalloc1-32bitUpgrade libnetapi0Upgrade libtevent0Upgrade libnetapi-develUpgrade wb-cifs-idmap-pluginUpgrade libtdb1-32bitUpgrade libwbclient0-x86Upgrade samba-winbind-32bitUpgrade cifs-utilsUpgrade samba-ad-dc-libsUpgrade samba-client-langUpgrade libldb2Upgrade libtevent0-x86Upgrade samba-docUpgrade libsmbsharemodes0Upgrade samba-winbindUpgrade ctdb | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Jan 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub