The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade samba-clientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-commonUpgrade libsmbclientUpgrade samba-swat | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.3.11Upgrade to Samba version 3.4.6 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade samba-winbind-x86Upgrade libtalloc1-x86Upgrade libsmbclient0-x86Upgrade samba-clientUpgrade samba-vscanUpgrade libtalloc1Upgrade libsmbclient-32bitUpgrade libmsrpcUpgrade cifs-mountUpgrade libtdb1-64bitUpgrade sap-aio-releaseUpgrade libtdb-develUpgrade libtalloc1-64bitUpgrade samba-client-x86Upgrade libtalloc-develUpgrade libsmbsharemodes-develUpgrade libtdb1-x86Upgrade samba-client-32bitUpgrade libsmbclient-64bitUpgrade libtdb1Upgrade libmsrpc-develUpgrade samba-64bitUpgrade libsmbclient0Upgrade sambaUpgrade samba-docUpgrade samba-32bitUpgrade libtalloc1-32bitUpgrade libsmbsharemodesUpgrade samba-x86Upgrade libwbclient-develUpgrade samba-client-64bitUpgrade libnetapi0Upgrade libwbclient0-64bitUpgrade samba-develUpgrade libsmbclient-x86Upgrade libtdb1-32bitUpgrade libsmbclientUpgrade samba-pythonUpgrade libwbclient0-x86Upgrade libnetapi-develUpgrade samba-winbindUpgrade libsmbclient-develUpgrade ldapsmbUpgrade libsmbsharemodes0Upgrade libwbclient0-32bitUpgrade libsmbclient0-32bitUpgrade samba-pdbUpgrade libwbclient0Upgrade samba-winbind-64bitUpgrade samba-winbind-32bitUpgrade libsmbclient0-64bitUpgrade samba-krb-printing | Feb 17, 2015 | Mar 10, 2010 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub