The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-swatUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.3.11Upgrade to Samba version 3.4.6 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade samba-32bitUpgrade samba-libs-32bitUpgrade libregistry-develUpgrade libtalloc1-32bitUpgrade libdcerpc-binding0Upgrade libsmbldap0-32bitUpgrade samba-winbindUpgrade libwbclient0-32bitUpgrade libsamba-policy-develUpgrade libsamba-util-develUpgrade libldb-develUpgrade samba-client-langUpgrade libsmbclient-raw0-32bitUpgrade ldapsmbUpgrade libnetapi-develUpgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamdb0Upgrade libsmbldap2Upgrade libndr-krb5pac0Upgrade libsamba-hostconfig0Upgrade samba-python3Upgrade libwbclient0-x86Upgrade libwbclient-develUpgrade samba-pythonUpgrade libsamba-util0Upgrade libndr-krb5pac0-32bitUpgrade libsmbconf0Upgrade libpdb-develUpgrade libsmbclient-raw-develUpgrade libsamba-errors0Upgrade samba-libs-python3Upgrade samba-dcerpcUpgrade libndr-nbt-develUpgrade libsmbsharemodes0Upgrade sambaUpgrade samba-ldb-ldapUpgrade samba-x86Upgrade libtalloc2-x86Upgrade libldb2Upgrade libwbclient0Upgrade libsmbclient-develUpgrade libpdb0Upgrade libsamba-credentials-develUpgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libndr0-32bitUpgrade libdcerpc-develUpgrade libsmbldap0Upgrade samba-develUpgrade samba-toolUpgrade libtevent-util0-32bitUpgrade samba-client-libsUpgrade ctdbUpgrade libdcerpc-atsvc0Upgrade libsmbconf0-32bitUpgrade libndr-krb5pac-develUpgrade libsmbclient0Upgrade libndr-nbt0Upgrade libsmbclient0-32bitUpgrade libpdb0-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-krb-printingUpgrade libnetapi0Upgrade libtdb1-32bitUpgrade samba-ad-dc-libsUpgrade samba-winbind-32bitUpgrade samba-ad-dcUpgrade samba-winbind-libsUpgrade samba-docUpgrade libsamba-passdb0-32bitUpgrade samba-gpupdateUpgrade libtevent-util0Upgrade libsmbldap2-32bitUpgrade libtdb1Upgrade libldb1Upgrade samba-testUpgrade libsmbldap-develUpgrade libtevent0-32bitUpgrade libnetapi0-32bitUpgrade libsmbsharemodes-develUpgrade libtdb1-x86Upgrade samba-test-develUpgrade libndr-standard0-32bitUpgrade libtalloc2Upgrade libsmbclient0-x86Upgrade libtevent-util-develUpgrade libtalloc1-x86Upgrade libsamba-policy0Upgrade samba-clientUpgrade libndr-standard0Upgrade samba-winbind-libs-langUpgrade libsamba-errors-develUpgrade libsamdb0-32bitUpgrade cifs-mountUpgrade libtevent-develUpgrade libsamba-passdb0Upgrade libtalloc1Upgrade libsamba-hostconfig-develUpgrade libsamba-errors0-32bitUpgrade libtdb-develUpgrade libtalloc-develUpgrade libsamdb-develUpgrade libtevent0Upgrade libtalloc2-32bitUpgrade libdcerpc-atsvc-develUpgrade samba-client-32bitUpgrade samba-kdcUpgrade libregistry0Upgrade libndr0Upgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade libsamba-util0-32bitUpgrade libsamba-credentials0-32bitUpgrade libgensec-develUpgrade samba-winbind-x86Upgrade samba-libsUpgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libgensec0Upgrade samba-dsdb-modulesUpgrade samba-client-x86Upgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade libdcerpc-samr0Upgrade ldb-toolsUpgrade libgensec0-32bitUpgrade libsmbclient-raw0Upgrade libtevent0-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub