The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 10, 2010 |
| Oracle_linux | — | Upgrade libsmbclientUpgrade sambaUpgrade samba-commonUpgrade libsmbclient-develUpgrade samba-swatUpgrade samba-client | Oct 16, 2024 | Mar 9, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2010 |
| Samba | — | Upgrade to Samba version 3.4.6Upgrade to Samba version 3.3.11 | Nov 13, 2013 | Mar 10, 2010 |
| Suse | — | Upgrade libnetapi0-32bitUpgrade samba-test-develUpgrade libndr-standard-develUpgrade libdcerpc-atsvc-develUpgrade cifs-mountUpgrade libtalloc2-32bitUpgrade libsmbsharemodes-develUpgrade ldb-toolsUpgrade samba-testUpgrade libsamdb-develUpgrade libtalloc1Upgrade libtevent-develUpgrade libndr-develUpgrade libsamba-hostconfig-develUpgrade libtdb1-x86Upgrade libdcerpc0Upgrade libtalloc-develUpgrade samba-winbind-x86Upgrade libsamba-errors0-32bitUpgrade libtdb1Upgrade libdcerpc-binding0-32bitUpgrade libgensec-develUpgrade libsamba-util0-32bitUpgrade libsamdb0-32bitUpgrade libtevent0-32bitUpgrade libsamba-errors-develUpgrade libtevent0-x86Upgrade libgensec0Upgrade libsmbclient-raw0Upgrade python3-ldbUpgrade libtevent0Upgrade samba-dsdb-modulesUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr0Upgrade libtalloc2Upgrade samba-client-x86Upgrade libndr0Upgrade libsamba-policy0Upgrade samba-clientUpgrade samba-winbind-libs-langUpgrade libsmbldap-develUpgrade samba-libsUpgrade libsamba-credentials0Upgrade libldb1Upgrade libndr-standard0Upgrade samba-libs-python3-32bitUpgrade samba-client-32bitUpgrade libtevent-util-develUpgrade libregistry0Upgrade libndr-standard0-32bitUpgrade samba-kdcUpgrade libtalloc1-x86Upgrade libsamba-passdb-develUpgrade libtdb-develUpgrade libndr-nbt0-32bitUpgrade libsamba-passdb0Upgrade libgensec0-32bitUpgrade libsmbclient0-x86Upgrade samba-libs-32bitUpgrade libpdb-develUpgrade libsmbclient0Upgrade libpdb0Upgrade libtalloc2-x86Upgrade libsmbsharemodes0Upgrade libsmbldap2-32bitUpgrade libdcerpc0-32bitUpgrade libndr-nbt-develUpgrade sambaUpgrade libwbclient0-x86Upgrade libsmbldap0-32bitUpgrade libdcerpc-binding0Upgrade libsamba-errors0Upgrade samba-develUpgrade libsmbldap2Upgrade libtevent-util0-32bitUpgrade libdcerpc-samr-develUpgrade libdcerpc-atsvc0Upgrade libnetapi-develUpgrade libsamba-util-develUpgrade samba-gpupdateUpgrade libldb-develUpgrade libsamba-passdb0-32bitUpgrade samba-winbindUpgrade libtalloc1-32bitUpgrade libsamba-hostconfig0Upgrade samba-client-langUpgrade libndr-krb5pac0Upgrade libsmbconf0-32bitUpgrade samba-pythonUpgrade samba-dcerpcUpgrade samba-krb-printingUpgrade libregistry-develUpgrade libtevent-util0Upgrade libsmbclient-raw0-32bitUpgrade samba-ad-dc-libsUpgrade libndr0-32bitUpgrade samba-docUpgrade samba-32bitUpgrade samba-ad-dcUpgrade samba-winbind-32bitUpgrade samba-winbind-libsUpgrade libwbclient0Upgrade ctdb-pcp-pmdaUpgrade libsamba-credentials-develUpgrade libwbclient-develUpgrade libsamdb0Upgrade libdcerpc-develUpgrade samba-core-develUpgrade libsamba-hostconfig0-32bitUpgrade samba-toolUpgrade libndr-krb5pac-develUpgrade libsmbconf0Upgrade libsmbldap0Upgrade libndr-krb5pac0-32bitUpgrade libsmbconf-develUpgrade libtdb1-32bitUpgrade ctdbUpgrade libsmbclient-raw-develUpgrade libnetapi0Upgrade libsamba-policy-develUpgrade libsmbclient-develUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libpdb0-32bitUpgrade libldb2Upgrade libwbclient0-32bitUpgrade samba-python3Upgrade samba-x86Upgrade libsmbclient0-32bitUpgrade samba-libs-python3Upgrade libsamba-util0Upgrade libndr-nbt0Upgrade ldapsmb | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | Mar 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub