PT-2009-2737 · Samba · Samba

Publicado 2009-01-05 · Atualizado 2024-06-15 · CVE-2009-0022

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions 3.2.0 through 3.2.6

Description The issue allows remote authenticated users to access the root filesystem by sending a crafted connection request with a blank share name when registry shares are enabled.

Recommendations For Samba versions 3.2.0 through 3.2.6, consider disabling registry shares until a patch is available to prevent exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0022

ECHO-D1FE-BE89-4158

OPENSUSE-SU-2024:10683-1

OPENSUSE-SU-2024:11365-1

Produtos afetados

Samba

Referências · 87

• https://suse.com/security/cve/CVE-2019-12436 · Nota
• https://suse.com/security/cve/CVE-2018-16851 · Nota
• http://securityfocus.com/bid/33118 · Nota
• https://suse.com/security/cve/CVE-2018-1050 · Nota
• https://suse.com/security/cve/CVE-2021-20254 · Nota
• https://suse.com/security/cve/CVE-2017-7494 · Nota
• http://samba.org/samba/security/CVE-2009-0022.html · Nota
• https://suse.com/security/cve/CVE-2008-1105 · Nota
• https://suse.com/security/cve/CVE-2016-2125 · Nota
• https://suse.com/security/cve/CVE-2007-5398 · Nota
• https://suse.com/security/cve/CVE-2018-1140 · Nota
• https://suse.com/security/cve/CVE-2018-1057 · Nota
• https://suse.com/security/cve/CVE-2021-20277 · Nota
• http://osvdb.org/51152 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2009:042 · Aviso do Fabricante