CVEvulnerability

CVE-2010-0926

3.5 LOW Published 2010-03-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-03-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22

Description

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Affected configurations

• samba samba 3.3.0 • samba samba 3.3.1 • samba samba 3.3.2 • samba samba 3.3.3 • samba samba 3.3.4 • samba samba 3.3.5 • samba samba 3.3.6 • samba samba 3.3.7 • samba samba 3.3.8 • samba samba 3.3.9 • samba samba 3.3.10 • samba samba 3.4.0 • samba samba 3.4.1 • samba samba 3.4.2 • samba samba 3.4.3 • samba samba 3.4.4 • samba samba 3.4.5 • samba samba 3.5.0

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References