The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade samba-swatUpgrade libsmbclient-develUpgrade samba-client | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6Upgrade to Samba version 3.3.11 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade samba-client-x86Upgrade libtalloc-develUpgrade samba-clientUpgrade libtdb1Upgrade cifs-mountUpgrade libtalloc1-x86Upgrade libtalloc1-64bitUpgrade libsmbclient-64bitUpgrade samba-vscanUpgrade libsmbclient0-x86Upgrade libtdb-develUpgrade libtalloc1Upgrade libmsrpcUpgrade libsmbsharemodes-develUpgrade samba-winbind-x86Upgrade samba-client-32bitUpgrade libsmbclient-32bitUpgrade sap-aio-releaseUpgrade libtdb1-x86Upgrade libtdb1-64bitUpgrade libsmbsharemodesUpgrade libsmbclient0-32bitUpgrade libwbclient0-32bitUpgrade libwbclient0-x86Upgrade samba-develUpgrade libtalloc1-32bitUpgrade samba-pythonUpgrade libsmbclient-x86Upgrade libnetapi0Upgrade libmsrpc-develUpgrade samba-winbind-64bitUpgrade samba-winbind-32bitUpgrade libwbclient0Upgrade libsmbclient-develUpgrade libsmbsharemodes0Upgrade samba-64bitUpgrade samba-docUpgrade samba-x86Upgrade samba-winbindUpgrade samba-krb-printingUpgrade sambaUpgrade libsmbclient0-64bitUpgrade libwbclient-develUpgrade libtdb1-32bitUpgrade libwbclient0-64bitUpgrade samba-client-64bitUpgrade libnetapi-develUpgrade samba-32bitUpgrade samba-pdbUpgrade libsmbclient0Upgrade ldapsmbUpgrade libsmbclient | Feb 17, 2015 | Mar 10, 2010 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub