The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-swatUpgrade sambaUpgrade libsmbclientUpgrade samba-commonUpgrade libsmbclient-devel | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6Upgrade to Samba version 3.3.11 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade libsmbldap0-32bitUpgrade libsmbldap0Upgrade libtevent-util0Upgrade samba-docUpgrade samba-x86Upgrade libwbclient0Upgrade libsmbconf-develUpgrade samba-ad-dcUpgrade libsamba-errors0Upgrade samba-pythonUpgrade samba-client-libsUpgrade libwbclient0-x86Upgrade libsmbldap2-32bitUpgrade ldapsmbUpgrade libndr-krb5pac-develUpgrade samba-develUpgrade libsamba-util-develUpgrade libsmbconf0-32bitUpgrade libdcerpc-samr-develUpgrade samba-core-develUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0Upgrade libtalloc2-x86Upgrade samba-libs-32bitUpgrade libsmbclient-develUpgrade libdcerpc-develUpgrade libldb-develUpgrade libtalloc1-32bitUpgrade libdcerpc-binding0Upgrade samba-ad-dc-libsUpgrade libwbclient0-32bitUpgrade libsmbclient0Upgrade ctdb-pcp-pmdaUpgrade libndr-krb5pac0-32bitUpgrade samba-32bitUpgrade samba-krb-printingUpgrade libndr-nbt0Upgrade libpdb-develUpgrade libsmbldap2Upgrade libndr-nbt-develUpgrade libsamba-passdb0-32bitUpgrade samba-dcerpcUpgrade samba-gpupdateUpgrade libsmbclient-raw0-32bitUpgrade libnetapi-develUpgrade libsmbclient0-32bitUpgrade samba-python3Upgrade libsmbsharemodes0Upgrade libndr0-32bitUpgrade libsmbclient-raw-develUpgrade libsamdb0Upgrade libdcerpc-atsvc0Upgrade libpdb0Upgrade samba-winbindUpgrade samba-client-langUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade libtdb1-32bitUpgrade samba-libs-python3Upgrade libsamba-hostconfig0-32bitUpgrade samba-toolUpgrade libsamba-policy-develUpgrade libwbclient-develUpgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade ctdbUpgrade libsmbconf0Upgrade samba-winbind-32bitUpgrade libsamba-util0Upgrade libnetapi0Upgrade libsamba-credentials-develUpgrade sambaUpgrade libpdb0-32bitUpgrade libldb2Upgrade libregistry-develUpgrade libnetapi0-32bitUpgrade libndr-nbt0-32bitUpgrade libtalloc2Upgrade libdcerpc0Upgrade libsamba-credentials0-32bitUpgrade samba-clientUpgrade libndr-develUpgrade libtevent0-32bitUpgrade libsamba-passdb-develUpgrade samba-client-x86Upgrade samba-libs-python3-32bitUpgrade libsamdb-develUpgrade python3-ldbUpgrade samba-libsUpgrade libsamba-hostconfig-develUpgrade libndr0Upgrade libtdb1-x86Upgrade samba-dsdb-modulesUpgrade samba-test-develUpgrade libtalloc1Upgrade libsamba-util0-32bitUpgrade libsamba-errors-develUpgrade libsamba-errors0-32bitUpgrade libgensec0-32bitUpgrade libsamdb0-32bitUpgrade libsamba-passdb0Upgrade libgensec0Upgrade libtdb-develUpgrade libtevent-develUpgrade libsmbclient-raw0Upgrade libgensec-develUpgrade libtevent0-x86Upgrade libdcerpc-binding0-32bitUpgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade samba-testUpgrade cifs-mountUpgrade libsamba-credentials0Upgrade libtdb1Upgrade samba-kdcUpgrade samba-winbind-x86Upgrade libregistry0Upgrade libsmbclient0-x86Upgrade samba-client-32bitUpgrade libdcerpc-samr0Upgrade libtalloc1-x86Upgrade ldb-toolsUpgrade libtalloc-develUpgrade libtevent-util-develUpgrade libndr-standard-develUpgrade libldb1Upgrade libtevent0Upgrade libtalloc2-32bitUpgrade libndr-standard0Upgrade libdcerpc-atsvc-develUpgrade libsmbsharemodes-develUpgrade libsmbldap-develUpgrade samba-winbind-libs-lang | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub