CVE-2010-0926
- State
- Published
- Severity
- Not scored
- Published
- Mar 9, 2010
- Updated
- Aug 7, 2024
- Reserved
- Mar 5, 2010
Description
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [samba-technical] 20100207 Re: Claimed Zero Day exploit in Samba.mailing-list
- 39317third-party-advisory
- [oss-security] 20100206 Re: Samba symlink 0day flawmailing-list
- [samba-technical] 20100206 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [oss-security] 20100305 Re: Samba symlink 0day flawmailing-list
- http://blog.metasploit.com/2010/02/exploiting-samba-symlink-traversal.html
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- 20100204 Re: Samba Remote Zero-Day Exploitmailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- 20100205 Re: Samba Remote Zero-Day Exploitmailing-list
- [samba-technical] 20100206 Re: Claimed Zero Day exploit in Samba.mailing-list
- [oss-security] 20100206 Re: Samba symlink 0day flawmailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- http://gitweb.samba.org/?p=samba.git%3Ba=commit%3Bh=bd269443e311d96ef495a9db47d1b95eb83bb8f4
- [oss-security] 20100305 Re: Samba symlink 0day flawmailing-list
- 20100204 Samba Remote Zero-Day Exploitmailing-list
- SUSE-SR:2010:008vendor-advisory
- http://www.samba.org/samba/news/symlink_attack.html
- SUSE-SR:2010:014vendor-advisory
- [samba-technical] 20100206 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 re: Claimed Zero Day exploit in Samba.mailing-list
- https://bugzilla.samba.org/show_bug.cgi?id=7104
- [oss-security] 20100205 Samba symlink 0day flawmailing-list
- [oss-security] 20100205 Re: Samba symlink 0day flawmailing-list
- 20100204 Re: Samba Remote Zero-Day Exploitmailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [samba-technical] 20100205 Re: Claimed Zero Day exploit in Samba.mailing-list
- [oss-security] 20100205 Re: Samba symlink 0day flawmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=562568
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.