QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-0926

Back to search

CVE-2010-0926

Published: Mar 9, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

VendorProductVersions

n/a

n/a

affected
n/a

References

39317
third-party-advisory
x_refsource_SECUNIA
20100204 Re: Samba Remote Zero-Day Exploit
mailing-list
x_refsource_FULLDISC
20100205 Re: Samba Remote Zero-Day Exploit
mailing-list
x_refsource_FULLDISC
20100204 Samba Remote Zero-Day Exploit
mailing-list
x_refsource_FULLDISC
SUSE-SR:2010:008
vendor-advisory
x_refsource_SUSE
SUSE-SR:2010:014
vendor-advisory
x_refsource_SUSE
20100204 Re: Samba Remote Zero-Day Exploit
mailing-list
x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now