Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-2813

Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.

Published

2009-09-14T16:30:00.453

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application samba samba 3.0.12 Yes
Application samba samba 3.0.13 Yes
Application samba samba 3.0.14 Yes
Application samba samba 3.0.14a Yes
Application samba samba 3.0.15 Yes
Application samba samba 3.0.16 Yes
Application samba samba 3.0.17 Yes
Application samba samba 3.0.18 Yes
Application samba samba 3.0.19 Yes
Application samba samba 3.0.20 Yes
Application samba samba 3.0.20a Yes
Application samba samba 3.0.20b Yes
Application samba samba 3.0.21 Yes
Application samba samba 3.0.21a Yes
Application samba samba 3.0.21b Yes
Application samba samba 3.0.21c Yes
Application samba samba 3.0.22 Yes
Application samba samba 3.0.23 Yes
Application samba samba 3.0.23a Yes
Application samba samba 3.0.23b Yes
Application samba samba 3.0.23c Yes
Application samba samba 3.0.23d Yes
Application samba samba 3.0.24 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25 Yes
Application samba samba 3.0.25a Yes
Application samba samba 3.0.25b Yes
Application samba samba 3.0.25c Yes
Application samba samba 3.0.26 Yes
Application samba samba 3.0.26a Yes
Application samba samba 3.0.27 Yes
Application samba samba 3.0.27a Yes
Application samba samba 3.0.28 Yes
Application samba samba 3.0.28a Yes
Application samba samba 3.0.29 Yes
Application samba samba 3.0.30 Yes
Application samba samba 3.0.31 Yes
Application samba samba 3.0.32 Yes
Application samba samba 3.0.33 Yes
Application samba samba 3.0.34 Yes
Application samba samba 3.0.35 Yes
Application samba samba 3.0.36 Yes
Application samba samba 3.2 Yes
Application samba samba 3.2.0 Yes
Application samba samba 3.2.1 Yes
Application samba samba 3.2.2 Yes
Application samba samba 3.2.3 Yes
Application samba samba 3.2.4 Yes
Application samba samba 3.2.5 Yes
Application samba samba 3.2.6 Yes
Application samba samba 3.2.7 Yes
Application samba samba 3.2.8 Yes
Application samba samba 3.2.9 Yes
Application samba samba 3.2.10 Yes
Application samba samba 3.2.11 Yes
Application samba samba 3.2.12 Yes
Application samba samba 3.2.13 Yes
Application samba samba 3.2.14 Yes
Application samba samba 3.2.15 Yes
Application samba samba 3.3 Yes
Application samba samba 3.3.0 Yes
Application samba samba 3.3.1 Yes
Application samba samba 3.3.2 Yes
Application samba samba 3.3.3 Yes
Application samba samba 3.3.4 Yes
Application samba samba 3.3.5 Yes
Application samba samba 3.3.6 Yes
Application samba samba 3.3.7 Yes
Application samba samba 3.4 Yes
Application samba samba 3.4.0 Yes
Application samba samba 3.4.1 Yes
Operating System apple mac_os_x 10.5.8 Yes
Operating System apple mac_os_x_server 10.5.8 Yes
Operating System fedoraproject fedora 11 Yes
References