Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 2.2.0a vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0815
The unix_clean_name function in Samba 2.2.x up to and including 2.2.11, and 3.0.x prior to 3.0.2a, trims certain directory names down to absolute paths, which could allow remote malicious users to bypass the specified share restrictions and read, write, or list arbitrary files vi...
Samba Samba 2.2.0Samba Samba 2.2.5Samba Samba 2.2.6Samba Samba 3.0.0Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.1aSamba Samba 2.2.7Samba Samba 2.2.7aSamba Samba 3.0.1Samba Samba 3.0.2Samba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.2.8Samba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 2.2.3aSamba Samba 2.2.4Samba Samba 2.2.9Samba Samba 2.2a
NA
CVE-2003-0086
The code for writing reg files in Samba prior to 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
Samba Samba 2.0.4Samba Samba 2.0.5Samba Samba 2.2.1aSamba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.0.2Samba Samba 2.0.3Samba Samba 2.2.0Samba Samba 2.2.0aSamba Samba 2.2.7Samba Samba 2.2.7aSamba Samba 2.0.1Samba Samba 2.0.10Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.5Samba Samba 2.2.6Samba Samba 2.0.0Samba Samba 2.0.6Samba Samba 2.0.7Samba Samba 2.2.3aSamba Samba 2.2.4
NA
CVE-2003-0085
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba prior to 2.2.8, and Samba-TNG prior to 0.3.1, allows remote malicious users to execute arbitrary code.
Samba Samba 2.0.1Samba Samba 2.0.10Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.4Samba Samba 2.2.5Samba Samba 2.0.2Samba Samba 2.0.3Samba Samba 2.2.0Samba Samba 2.2.0aSamba Samba 2.2.6Samba Samba 2.2.7Samba Samba 2.0.0Samba Samba 2.0.6Samba Samba 2.0.7Samba Samba 2.2.3Samba Samba 2.2.3aSamba Samba 2.0.4Samba Samba 2.0.5Samba Samba 2.2.1aSamba Samba 2.2.2Samba Samba 2.2.7a
NA
CVE-2007-6015
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 up to and including 3.0.27a, when the "domain logons" option is enabled, allows remote malicious users to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string...
Samba Samba 2.0.1Samba Samba 2.0.7Samba Samba 2.0.8Samba Samba 2.2.3Samba Samba 2.2.3aSamba Samba 2.2.8aSamba Samba 2.2.9Samba Samba 3.0.13Samba Samba 3.0.14Samba Samba 3.0.21bSamba Samba 3.0.21cSamba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 2.0.3Samba Samba 2.0.4Samba Samba 2.2.0aSamba Samba 2.2.11Samba Samba 2.2.6Samba Samba 2.2.7Samba Samba 3.0.1Samba Samba 3.0.10
NA
CVE-2004-1154
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x up to and including 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that...
Samba Samba 2.0.0Samba Samba 2.0.6Samba Samba 2.0.7Samba Samba 2.2.1aSamba Samba 2.2.2Samba Samba 2.2.3Samba Samba 2.2.8Samba Samba 2.2.8aSamba Samba 3.0.2aSamba Samba 3.0.3Samba Samba 2.0.1Samba Samba 2.0.10Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.3aSamba Samba 2.2.4Samba Samba 2.2.9Samba Samba 2.2aSamba Samba 3.0.4Samba Samba 2.0.4Samba Samba 2.0.5Samba Samba 2.2.11
NA
CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and previous versions does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.2.3Samba Samba 1.9.18Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5
NA
CVE-2011-2724
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and previous versions does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab c...
Samba Samba 3.0.19Samba Samba 3.0.23Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.0.10Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 2.2.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 2.0.1Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.5.9
NA
CVE-2001-1162
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba prior to 2.2.0a allows remote malicious users to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
Samba Samba 2.0.9Samba Samba 2.2.0Samba Samba 2.0.7Samba Samba 2.0.8Samba Samba 2.0.5Samba Samba 2.0.6Hp Cifs-9000 Server A.01.05Hp Cifs-9000 Server A.01.06
NA
CVE-2003-0196
Multiple buffer overflows in Samba prior to 2.2.8a may allow remote malicious users to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
Samba-tng Samba-tng 0.3Samba-tng Samba-tng 0.3.1Samba Samba 2.0.5Samba Samba 2.0.6Samba Samba 2.2.3Samba Samba 2.2.3aSamba Samba 2.0.0Samba Samba 2.0.1Samba Samba 2.0.7Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.4Samba Samba 2.2.5Samba Samba 2.0.10Samba Samba 2.0.2Samba Samba 2.2.0Samba Samba 2.2.0aSamba Samba 2.2.6Samba Samba 2.2.7Samba Samba 2.0.3Samba Samba 2.0.4Samba Samba 2.2.1a
NA
CVE-2003-0201
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x prior to 2.2.8a, 2.0.10 and previous versions 2.0.x versions, and Samba-TNG prior to 0.3.2, allows remote malicious users to execute arbitrary code.
Samba Samba 2.0.3Samba Samba 2.0.4Samba Samba 2.2.1aSamba Samba 2.2.3aSamba Samba 2.0.10Samba Samba 2.0.2Samba Samba 2.2.0Samba Samba 2.2.0aSamba Samba 2.2.7aSamba Samba 2.2.8Samba-tng Samba-tng 0.3Samba-tng Samba-tng 0.3.1Samba Samba 2.0.5Samba Samba 2.0.6Samba Samba 2.0.7Samba Samba 2.2.4Samba Samba 2.2.5Samba Samba 2.0.0Samba Samba 2.0.1Samba Samba 2.0.8Samba Samba 2.0.9Samba Samba 2.2.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook