CVEvulnerability
CVE-2009-2813
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Affected configurations
• samba samba 3.0.12
• samba samba 3.0.13
• samba samba 3.0.14
• samba samba 3.0.14a
• samba samba 3.0.15
• samba samba 3.0.16
• samba samba 3.0.17
• samba samba 3.0.18
• samba samba 3.0.19
• samba samba 3.0.20
• samba samba 3.0.20a
• samba samba 3.0.20b
• samba samba 3.0.21
• samba samba 3.0.21a
• samba samba 3.0.21b
• samba samba 3.0.21c
• samba samba 3.0.22
• samba samba 3.0.23
• samba samba 3.0.23a
• samba samba 3.0.23b
• samba samba 3.0.23c
• samba samba 3.0.23d
• samba samba 3.0.24
• samba samba 3.0.25
• samba samba 3.0.25a
• samba samba 3.0.25b
• samba samba 3.0.25c
• samba samba 3.0.26
• samba samba 3.0.26a
• samba samba 3.0.27
• samba samba 3.0.27a
• samba samba 3.0.28
• samba samba 3.0.28a
• samba samba 3.0.29
• samba samba 3.0.30
• samba samba 3.0.31
• samba samba 3.0.32
• samba samba 3.0.33
• samba samba 3.0.34
• samba samba 3.0.35
• samba samba 3.0.36
• samba samba 3.2
• samba samba 3.2.0
• samba samba 3.2.1
• samba samba 3.2.2
• samba samba 3.2.3
• samba samba 3.2.4
• samba samba 3.2.5
• samba samba 3.2.6
• samba samba 3.2.7
• samba samba 3.2.8
• samba samba 3.2.9
• samba samba 3.2.10
• samba samba 3.2.11
• samba samba 3.2.12
• samba samba 3.2.13
• samba samba 3.2.14
• samba samba 3.2.15
• samba samba 3.3
• samba samba 3.3.0
… and 13 more
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=126514298313071&w=2 marc.info
- http://news.samba.org/releases/3.0.37/ news.samba.org
- http://news.samba.org/releases/3.2.15/ news.samba.org
- http://news.samba.org/releases/3.3.8/ news.samba.org
- http://news.samba.org/releases/3.4.2/ news.samba.org
- http://osvdb.org/57955 osvdb.org
- http://secunia.com/advisories/36701 Vendor Advisory
- http://secunia.com/advisories/36893 Vendor Advisory
- http://secunia.com/advisories/36918 Vendor Advisory
- http://secunia.com/advisories/36937 Vendor Advisory
- http://secunia.com/advisories/36953 Vendor Advisory
- http://secunia.com/advisories/37428 Vendor Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 slackware.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 sunsolve.sun.com
- http://support.apple.com/kb/HT3865 Vendor Advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0145 wiki.rpath.com
- http://www.samba.org/samba/security/CVE-2009-2813.html Vendor Advisory
- http://www.securityfocus.com/archive/1/507856/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/36363 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-839-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/2810 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53174 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html www.redhat.com
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=126514298313071&w=2 marc.info
- http://news.samba.org/releases/3.0.37/ news.samba.org
- http://news.samba.org/releases/3.2.15/ news.samba.org
- http://news.samba.org/releases/3.3.8/ news.samba.org
- http://news.samba.org/releases/3.4.2/ news.samba.org
- http://osvdb.org/57955 osvdb.org
- http://secunia.com/advisories/36701 Vendor Advisory
- http://secunia.com/advisories/36893 Vendor Advisory
- http://secunia.com/advisories/36918 Vendor Advisory
- http://secunia.com/advisories/36937 Vendor Advisory
- http://secunia.com/advisories/36953 Vendor Advisory
- http://secunia.com/advisories/37428 Vendor Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439 slackware.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1 sunsolve.sun.com
- http://support.apple.com/kb/HT3865 Vendor Advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0145 wiki.rpath.com
- http://www.samba.org/samba/security/CVE-2009-2813.html Vendor Advisory
- http://www.securityfocus.com/archive/1/507856/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/36363 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-839-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/2810 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53174 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html www.redhat.com