CVE-2004-0815

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow…

published October 16, 2004

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04887 · 92.0th percentile
Published
2004-10-16T04:00Z
EPSS history
Timeline
  • 16 OCT 04:00Z
    The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow…
    cvelistv5