Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

samba samba 3.3.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0926
The default configuration of smbd in Samba prior to 3.3.11, 3.4.x prior to 3.4.6, and 3.5.x prior to 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command...
Samba Samba 3.3.3Samba Samba 3.4.2Samba Samba 3.4.0Samba Samba 3.3.9Samba Samba 3.4.5Samba Samba 3.3.4Samba Samba 3.3.7Samba Samba 3.4.1Samba Samba 3.3.1Samba Samba 3.3.0Samba Samba 3.3.6Samba Samba 3.5.0Samba Samba 3.3.2Samba Samba 3.4.4Samba Samba 3.4.3Samba Samba 3.3.8Samba Samba 3.3.5Samba Samba 3.3.10
NA
CVE-2009-2813
Samba 3.4 prior to 3.4.2, 3.3 prior to 3.3.8, 3.2 prior to 3.2.15, and 3.0.12 up to and including 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolvi...
Samba Samba 3.4.1Samba Samba 3.3Samba Samba 3.3.6Samba Samba 3.3.7Samba Samba 3.2.10Samba Samba 3.2.11Samba Samba 3.2.13Samba Samba 3.2.15Samba Samba 3.0.17Samba Samba 3.0.18Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.0.25Samba Samba 3.0.25cSamba Samba 3.0.26Samba Samba 3.0.31Samba Samba 3.0.32Samba Samba 3.3.2Samba Samba 3.3.3Samba Samba 3.2.2Samba Samba 3.2.7Samba Samba 3.2
NA
CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and previous versions does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.2.3Samba Samba 1.9.18Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5
NA
CVE-2010-1635
The chain_reply function in process.c in smbd in Samba prior to 3.4.8 and 3.5.x prior to 3.5.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a ...
Samba Samba 3.0.19Samba Samba 3.0.14aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 3.2.3Samba Samba 3.3Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5Samba Samba 3.3.9
NA
CVE-2010-1642
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba prior to 3.4.8 and 3.5.x prior to 3.5.2 allows remote malicious users to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup ...
Samba Samba 3.0.19Samba Samba 3.0.14aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 3.2.3Samba Samba 3.3Samba Samba 3.0.2aSamba Samba 3.0.36Samba Samba 3.4.0Samba Samba 3.2.4Samba Samba 3.0.5Samba Samba 3.3.9
NA
CVE-2011-0719
Samba 3.x prior to 3.3.15, 3.4.x prior to 3.4.12, and 3.5.x prior to 3.5.7 does not perform range checks for file descriptors before use of the FD_SET macro, which allows remote malicious users to cause a denial of service (stack memory corruption, and infinite loop or daemon cra...
Samba Samba 3.0.28Samba Samba 3.2.13Samba Samba 3.0.35Samba Samba 3.0.18Samba Samba 3.0.17Samba Samba 3.0.10Samba Samba 3.0.13Samba Samba 3.0.24Samba Samba 3.0.25Samba Samba 3.0.21cSamba Samba 3.0.22Samba Samba 3.2.5Samba Samba 3.0.27Samba Samba 3.0.37Samba Samba 3.0.29Samba Samba 3.0.15Samba Samba 3.0.11Samba Samba 3.0.23cSamba Samba 3.0.23dSamba Samba 3.0.21aSamba Samba 3.0.21bSamba Samba 3.0.2a
NA
CVE-2012-1182
The RPC code generator in Samba 3.x prior to 3.4.16, 3.5.x prior to 3.5.14, and 3.6.x prior to 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote malicious users to execute arbitrary code v...
Samba Samba 3.4.0Samba Samba 3.4.14Samba Samba 3.4.5Samba Samba 3.4.6Samba Samba 3.3.15Samba Samba 3.3.16Samba Samba 3.3.5Samba Samba 3.3.4Samba Samba 3.3.3Samba Samba 3.2.4Samba Samba 3.2.3Samba Samba 3.2.11Samba Samba 3.2.12Samba Samba 3.0.14Samba Samba 3.0.29Samba Samba 3.0.1Samba Samba 3.0.0Samba Samba 3.0.23bSamba Samba 3.0.23cSamba Samba 3.0.21Samba Samba 3.0.21aSamba Samba 3.0.6
NA
CVE-2013-0213
The Samba Web Administration Tool (SWAT) in Samba 3.x prior to 3.5.21, 3.6.x prior to 3.6.12, and 4.x prior to 4.0.2 allows remote malicious users to conduct clickjacking attacks via a (1) FRAME or (2) IFRAME element.
Samba Samba 3.5.15Samba Samba 3.5.14Samba Samba 3.5.6Samba Samba 3.5.5Samba Samba 3.4.16Samba Samba 3.4.15Samba Samba 3.4.8Samba Samba 3.4.7Samba Samba 3.4.6Samba Samba 3.3.9Samba Samba 3.3.10Samba Samba 3.3.12Samba Samba 3.3.13Samba Samba 3.2.0Samba Samba 3.2.14Samba Samba 3.2.7Samba Samba 3.2.2Samba Samba 3.1.0Samba Samba 3.0.28Samba Samba 3.0.16Samba Samba 3.0.15Samba Samba 3.0.11
NA
CVE-2013-0214
Cross-site request forgery (CSRF) vulnerability in the Samba Web Administration Tool (SWAT) in Samba 3.x prior to 3.5.21, 3.6.x prior to 3.6.12, and 4.x prior to 4.0.2 allows remote malicious users to hijack the authentication of arbitrary users by leveraging knowledge of a passw...
Samba Samba 3.6.5Samba Samba 3.6.6Samba Samba 3.6.1Samba Samba 3.6.2Samba Samba 3.6.9Samba Samba 3.6.10Samba Samba 3.6.3Samba Samba 3.6.4Samba Samba 3.6.11Samba Samba 3.6.0Samba Samba 3.6.7Samba Samba 3.6.8Samba Samba 4.0.0Samba Samba 4.0.1Samba Samba 3.5.14Samba Samba 3.5.13Samba Samba 3.5.6Samba Samba 3.5.5Samba Samba 3.4.15Samba Samba 3.4.14Samba Samba 3.4.7Samba Samba 3.4.6
NA
CVE-2011-2724
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and previous versions does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab c...
Samba Samba 3.0.19Samba Samba 3.0.23Samba Samba 3.0.14aSamba Samba 2.2.1aSamba Samba 3.0.27Samba Samba 3.0.31Samba Samba 3.0.3Samba Samba 2.0.10Samba Samba 2.2.12Samba Samba 3.0.8Samba Samba 3.2.15Samba Samba 3.3.3Samba Samba 2.2.3Samba Samba 3.5.1Samba Samba 3.0.29Samba Samba 3.0.25Samba Samba 2.0.1Samba Samba 3.0.25bSamba Samba 3.2.5Samba Samba 3.4.2Samba Samba 2.2.3aSamba Samba 3.5.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook