CVE-2004-0815

Published: Nov 3, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

Affected (20)

Products: Samba: Samba

1 product

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 2.2.0
Samba Samba	Version 2.2.0a
Samba Samba	Version 2.2.11
Samba Samba	Version 2.2.1a
Samba Samba	Version 2.2.2
Samba Samba	Version 2.2.3
Samba Samba	Version 2.2.3a
Samba Samba	Version 2.2.4
Samba Samba	Version 2.2.5
Samba Samba	Version 2.2.6
Samba Samba	Version 2.2.7
Samba Samba	Version 2.2.7a
Samba Samba	Version 2.2.8
Samba Samba	Version 2.2.8a
Samba Samba	Version 2.2.9
Samba Samba	Version 2.2a
Samba Samba	Version 3.0.0
Samba Samba	Version 3.0.1
Samba Samba	Version 3.0.2
Samba Samba	Version 3.0.2a

References (32)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=109655827913457&w=2

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1

Source: cve@mitre.org

http://us4.samba.org/samba/news/#security_2.2.12

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-600

Source: cve@mitre.org

PatchVendor Advisory

http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true

Source: cve@mitre.org

ExploitVendor Advisory

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2004_35_samba.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-498.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/377618

Source: cve@mitre.org

http://www.securityfocus.com/bid/11281

Source: cve@mitre.org

PatchVendor Advisory

http://www.trustix.org/errata/2004/0051/

Source: cve@mitre.org

https://bugzilla.fedora.us/show_bug.cgi?id=2102

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17556

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=109655827913457&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://us4.samba.org/samba/news/#security_2.2.12

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2004/dsa-600

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2004_35_samba.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-498.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/377618

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11281

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.trustix.org/errata/2004/0051/

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.fedora.us/show_bug.cgi?id=2102

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17556

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.