Published: 10/03/2010 Updated: 07/11/2023

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 361

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

The default configuration of smbd in Samba prior to 3.3.11, 3.4.x prior to 3.4.6, and 3.5.x prior to 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba samba 3.3.3
samba samba 3.4.2
samba samba 3.4.0
samba samba 3.3.9
samba samba 3.4.5
samba samba 3.3.4
samba samba 3.3.7
samba samba 3.4.1
samba samba 3.3.1
samba samba 3.3.0
samba samba 3.3.6
samba samba 3.5.0
samba samba 3.3.2
samba samba 3.4.4
samba samba 3.4.3
samba samba 3.3.8
samba samba 3.3.5
samba samba 3.3.10

Synopsis Low: samba security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic Updated samba packages that fix one security issue, one bug, and add oneenhancement are now available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having low ...

It was discovered the Samba handled symlinks in an unexpected way when both “wide links” and “UNIX extensions” were enabled, which is the default A remote attacker could create symlinks and access arbitrary files from the server ...

source: wwwsecurityfocuscom/bid/38111/info Samba is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input Exploits would allow an attacker to access files outside of the Samba user's root directory to obtain sensitive information and perform other attacks To exploit thi ...

source: wwwsecurityfocuscom/bid/38111/info Samba is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input Exploits would allow an attacker to access files outside of the Samba user's root directory to obtain sensitive information and perform other attacks To exploit ...

Vulnerable samba versions and exploits, wrapped in docker containers

vulnsamba This repo contains proof of concept exploits for 2 CVEs on old versions of samba For each CVE, there are two docker containers: victim and attacker Table of contents CVE-2010-0926 Information and links Containers description Instructions to reproduce CVE-2017-2619 Information and links Containers description Instructions to reproduce CVE-2010-0926 Informatio

Recursos de utilidad para el examen y laboratorio del OSCP

OSCP Este repositorio incluye distintas utilidades de cara a la preparación y obtención de la certificación OSCP Para utilizarlo adecuadamente se debe exportar la ruta raiz del repositorio al clonar el repositorio echo export OSCP=$PWD >> /root/bashrc Reconocimiento githubcom/pedroarias1015/oscp/tree/master/reconocimiento Explotacio

CVE-2010-0926

Vulnerability Summary

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect