Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
CVSS Details
- CVSS 3.1 Base Score: 4.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Smb | — | Apply OS X security update 2009-005 | Dec 16, 2011 | Sep 14, 2009 |
| Centos_linux | — | Upgrade samba-clientUpgrade samba-swatUpgrade sambaUpgrade samba-common | Dec 1, 2016 | Sep 14, 2009 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Sep 14, 2009 |
| Hpux | — | Update CIFS-Server.CIFS-LIB to the latest versionUpdate CIFS-Server.CIFS-ADMIN to the latest versionUpdate CIFS-Server.CIFS-DOC to the latest versionUpdate CIFS-CFSM.CFSM-KRN to the latest versionUpdate CIFS-Server.CIFS-UTIL to the latest versionUpdate CIFS-Server.CIFS-RUN to the latest versionUpdate CIFS-CFSM.CFSM-RUN to the latest versionUpdate CIFS-Server.CIFS-MAN to the latest version | Aug 11, 2017 | Sep 14, 2009 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-commonUpgrade samba-swatUpgrade samba | Oct 16, 2024 | Sep 14, 2009 |
| Samba | — | Upgrade to Samba version 3.2.15Upgrade to Samba version 3.0.37Upgrade to Samba version 3.4.2Upgrade to Samba version 3.3.8 | Nov 13, 2013 | Sep 14, 2009 |
| Suse | — | Upgrade libsamba-errors-develUpgrade libndr-krb5pac0Upgrade libnetapi0Upgrade libsmbsharemodes-develUpgrade libgensec0-32bitUpgrade libtevent-develUpgrade samba-dsdb-modulesUpgrade sambaUpgrade libsamba-policy0Upgrade libndr-nbt0-32bitUpgrade libndr0Upgrade libdcerpc-develUpgrade libndr-krb5pac0-32bitUpgrade libtevent0-x86Upgrade libtalloc2-x86Upgrade ldb-toolsUpgrade cifs-utils-develUpgrade libtalloc-develUpgrade samba-winbind-libs-langUpgrade wb-cifs-idmap-pluginUpgrade samba-libs-32bitUpgrade libtevent-util0-32bitUpgrade ctdbUpgrade libsmbclient0-x86Upgrade libndr-standard0-32bitUpgrade libgensec0Upgrade samba-pythonUpgrade libsmbconf0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libwbclient0-x86Upgrade libgensec-develUpgrade libsmbldap0-32bitUpgrade libsamba-passdb-develUpgrade cifs-utilsUpgrade libtalloc2Upgrade libpdb0-32bitUpgrade libsmbconf0Upgrade samba-python3Upgrade libsmbldap-develUpgrade samba-libs-python3Upgrade samba-winbind-x86Upgrade libdcerpc-samr0Upgrade samba-testUpgrade libdcerpc-atsvc0Upgrade libpdb-develUpgrade libndr-krb5pac-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-binding0Upgrade libtevent-util-develUpgrade libdcerpc-atsvc-develUpgrade samba-libsUpgrade samba-core-develUpgrade libtalloc1-32bitUpgrade samba-winbind-libsUpgrade libtdb1-x86Upgrade libsamba-hostconfig0Upgrade libsmbldap2-32bitUpgrade samba-32bitUpgrade samba-develUpgrade samba-ldb-ldapUpgrade libwbclient0-32bitUpgrade libldb1Upgrade samba-client-langUpgrade libsamba-credentials0Upgrade libtevent0-32bitUpgrade libsamba-hostconfig-develUpgrade libsamba-passdb0-32bitUpgrade libsamba-util0-32bitUpgrade libtevent0Upgrade libsmbclient-raw0Upgrade libndr-develUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-test-develUpgrade libsamba-errors0Upgrade samba-libs-python3-32bitUpgrade libsmbclient-develUpgrade libwbclient0Upgrade libsamba-credentials0-32bitUpgrade libsmbclient0Upgrade libtalloc1-x86Upgrade libsmbconf-develUpgrade python3-ldbUpgrade libndr-standard0Upgrade samba-docUpgrade samba-client-x86Upgrade libnetapi0-32bitUpgrade libwbclient-develUpgrade libsamba-util0Upgrade libtalloc2-32bitUpgrade libregistry0Upgrade libdcerpc-samr-develUpgrade libsamdb0Upgrade samba-x86Upgrade libsmbldap0Upgrade libndr-standard-develUpgrade samba-ad-dcUpgrade libsamba-errors0-32bitUpgrade samba-ad-dc-libsUpgrade libtdb1Upgrade samba-toolUpgrade libpdb0Upgrade pam_cifscredsUpgrade libtdb1-32bitUpgrade libnetapi-develUpgrade libdcerpc0Upgrade samba-dcerpcUpgrade libsmbldap2Upgrade samba-krb-printingUpgrade libldb2Upgrade libndr-nbt0Upgrade libtdb-develUpgrade libndr-nbt-develUpgrade ldapsmbUpgrade libldb-develUpgrade libsamba-util-develUpgrade libsamdb-develUpgrade libregistry-develUpgrade libsmbclient0-32bitUpgrade samba-client-32bitUpgrade libndr0-32bitUpgrade libsamba-policy-develUpgrade libsmbclient-raw-develUpgrade libtalloc1Upgrade libtevent-util0Upgrade samba-gpupdateUpgrade samba-winbind-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0-32bitUpgrade cifs-mountUpgrade libdcerpc0-32bitUpgrade libsamba-passdb0Upgrade libsmbsharemodes0Upgrade samba-kdcUpgrade ctdb-pcp-pmdaUpgrade samba-clientUpgrade libsamba-credentials-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbclientUpgrade sambaUpgrade smbfs | Nov 8, 2024 | Sep 14, 2009 |
| Vmsa 2010 0006 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 244038 | Sep 2, 2010 | Sep 14, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub