The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade samba-clientUpgrade libsmbclient-develUpgrade sambaUpgrade libsmbclientUpgrade samba-swatUpgrade samba-common | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6Upgrade to Samba version 3.3.11 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade libsmbsharemodes0Upgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libndr0-32bitUpgrade libndr-nbt0Upgrade libldb-develUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-errors0Upgrade libtalloc2-x86Upgrade libnetapi-develUpgrade ldapsmbUpgrade libsmbconf0Upgrade libsmbconf-develUpgrade sambaUpgrade samba-core-develUpgrade libsmbldap2-32bitUpgrade samba-32bitUpgrade samba-ad-dcUpgrade libsamdb0Upgrade libpdb-develUpgrade libldb2Upgrade libndr-krb5pac0-32bitUpgrade libndr-krb5pac0Upgrade libsmbldap0Upgrade libdcerpc-develUpgrade libnetapi0Upgrade libwbclient-develUpgrade libdcerpc0-32bitUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade libwbclient0Upgrade libtevent-util0Upgrade samba-client-libsUpgrade samba-libs-python3Upgrade libtevent-util0-32bitUpgrade samba-toolUpgrade libsmbldap0-32bitUpgrade libsamba-util0Upgrade samba-winbind-libsUpgrade samba-winbind-32bitUpgrade samba-gpupdateUpgrade libsamba-credentials-develUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-binding0Upgrade samba-develUpgrade libdcerpc-atsvc0Upgrade ctdbUpgrade libndr-krb5pac-develUpgrade libsmbconf0-32bitUpgrade libtalloc1-32bitUpgrade libsamba-policy-develUpgrade samba-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libpdb0-32bitUpgrade libregistry-develUpgrade samba-winbindUpgrade libtdb1-32bitUpgrade samba-client-langUpgrade libsamba-util-develUpgrade libndr-nbt-develUpgrade samba-pythonUpgrade samba-dcerpcUpgrade libdcerpc-samr-develUpgrade libsmbclient-raw0-32bitUpgrade libsmbclient-raw-develUpgrade libpdb0Upgrade libsmbldap2Upgrade libwbclient0-x86Upgrade samba-x86Upgrade samba-krb-printingUpgrade libsmbclient0-32bitUpgrade samba-ad-dc-libsUpgrade libwbclient0-32bitUpgrade samba-docUpgrade libsmbclient0Upgrade libndr-standard0Upgrade libgensec0Upgrade libndr-nbt0-32bitUpgrade libndr0Upgrade libldb1Upgrade samba-libs-python3-32bitUpgrade cifs-mountUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc0Upgrade libgensec-develUpgrade libtalloc2-32bitUpgrade libgensec0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0Upgrade libsamba-credentials0-32bitUpgrade libndr-standard0-32bitUpgrade samba-client-x86Upgrade libtalloc2Upgrade libnetapi0-32bitUpgrade libsamba-passdb-develUpgrade python3-ldbUpgrade libsmbsharemodes-develUpgrade samba-testUpgrade libtdb1-x86Upgrade libtevent-util-develUpgrade libtevent0-32bitUpgrade samba-test-develUpgrade libsamdb-develUpgrade libtdb-develUpgrade libtalloc-develUpgrade samba-winbind-x86Upgrade libtevent0Upgrade libsmbldap-develUpgrade libsamba-credentials0Upgrade libsmbclient-raw0Upgrade libregistry0Upgrade libsamba-passdb0Upgrade libsamba-errors-develUpgrade libtdb1Upgrade samba-client-32bitUpgrade libsamba-util0-32bitUpgrade libtevent0-x86Upgrade libsamba-hostconfig-develUpgrade libndr-standard-develUpgrade samba-kdcUpgrade libtalloc1Upgrade libsamdb0-32bitUpgrade libtevent-develUpgrade libsmbclient0-x86Upgrade libtalloc1-x86Upgrade libndr-develUpgrade libdcerpc-samr0Upgrade libdcerpc-atsvc-develUpgrade samba-winbind-libs-langUpgrade samba-clientUpgrade ldb-toolsUpgrade samba-libs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub