ID CVE-2004-0815
Summary The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.
References
Vulnerable Configurations
  • cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2004:498
refmap via4
bid 11281
bugtraq
  • 20040930 Samba Security Announcement -- Potential Arbitrary File Access
  • 20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)
conectiva CLA-2004:873
confirm http://us4.samba.org/samba/news/#security_2.2.12
debian DSA-600
fedora FLSA:2102
idefense 20040930 Samba Arbitrary File Access Vulnerability
mandrake MDKSA-2004:104
sunalert
  • 101584
  • 200529
  • 57664
suse SUSE-SA:2004:035
trustix 2004-0051
xf samba-file-access(17556)
Last major update 30-10-2018 - 16:25
Published 03-11-2004 - 05:00
Last modified 30-10-2018 - 16:25
Back to Top