Samba directory traversal
Published:		06.01.2009
Source:		BUGTRAQ
SecurityVulns ID:		9559
Type:		remote
Level:		6/10
Description:		Root filesystem access is possible if "registry shares = yes" option is enabled.

Affected:		SAMBA : Samba 3.2
CVE:		CVE-2009-0022 (Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.)

Original document

UBUNTU, [USN-702-1] Samba vulnerability (06.01.2009)

Discuss:

Read or add your comments to this news (0 comments)