CVE-2010-0926

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote…

published March 9, 2010

CVSS

—

EPSS

30%

Percentile

98.2

In the wild

Unconfirmed

What it is

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.30431 · 98.2th percentile
Published: 2010-03-09T19:00Z

EPSS history

Timeline

09 MAR 19:00Z
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote…
cvelistv5