CVE		CVE-2009-0022
Status		Candidate
Description		Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.
Severity		Medium
CVSS score		6,3
CVSS vector		(AV:N/AC:M/Au:S/C:C/I:N/A:N)
Phase		Assigned (07.03.2011)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0022
References		BID : 33118
		CONFIRM : http://www.samba.org/samba/security/CVE-2009-0022....
		FEDORA : FEDORA-2009-0268
		MISC : http://master.samba.org/samba/ftp/patches/security...
		OSVDB : 51152
		SECTRACK : 1021513
		SECUNIA : 33379
		SECUNIA : 33392
		SECUNIA : 33431
		UBUNTU : USN-702-1
		VUPEN : ADV-2009-0017
		XF : samba-file-system-security-bypass(47733)
SecurityVulns:		Samba directory traversal