CVE-2009-0022

Published: Jan 5, 2009Modified: Apr 23, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:C/I:N/A:N

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.

Affected (7)

Products: Samba: Samba

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Version 3.2.0
Samba Samba	Version 3.2.1
Samba Samba	Version 3.2.2
Samba Samba	Version 3.2.3
Samba Samba	Version 3.2.4
Samba Samba	Version 3.2.5
Samba Samba	Version 3.2.6

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (26)

http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch

Source: secalert@redhat.com

http://osvdb.org/51152

Source: secalert@redhat.com

http://secunia.com/advisories/33379

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33392

Source: secalert@redhat.com

http://secunia.com/advisories/33431

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:042

Source: secalert@redhat.com

http://www.samba.org/samba/security/CVE-2009-0022.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/33118

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021513

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0017

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/47733

Source: secalert@redhat.com

https://usn.ubuntu.com/702-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html

Source: secalert@redhat.com

http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/51152

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33379

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/33392

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33431

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:042

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.samba.org/samba/security/CVE-2009-0022.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33118

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021513

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0017

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47733

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/702-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.