CVE

Id
3224  
CVE No.
CVE-2001-0406  
Status
Candidate  
Description
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.  
Phase
Modified (20050509)  
Votes
ACCEPT(5) Baker, Cole, Prosser, Williams, Ziese | MODIFY(1) Frech | NOOP(2) Christey, Wall  
Comments
Frech> XF:samba-tmpfile-symlink(6396) | Christey> note to self: double-check related submissions to ensure that | all references are complete | Christey> ADDREF RHSA-2001:044 (per Mark Cox of Red Hat) | Christey> Add "2.0.8 and earlier" to description; problem was fixed in | 2 different versions, and initial 2.0.8 fixes were incorrect. | BUGTRAQ:20010508 Samba 2.0.9 released - 2.0.8 did NOT fix the hole | URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0061.html | IMMUNIX:IMNX-2001-70-019-01 | BUGTRAQ:20010525 TSLSA-2001-0006: Samba | URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0242.html | CALDERA:CSSA-2001-018.0 | URL:http://www.calderasystems.com/support/security/advisories/CSSA-2001-018.0.txt  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
13524 3224 CVE-2001-0406 BUGTRAQ:20010417 Samba 2.0.8 security fix  View
13525 3224 CVE-2001-0406 URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html  View
13526 3224 CVE-2001-0406 DEBIAN:DSA-048  View
13527 3224 CVE-2001-0406 URL:http://www.debian.org/security/2001/dsa-048  View
13528 3224 CVE-2001-0406 CALDERA:CSSA-2001-015.0  View
13529 3224 CVE-2001-0406 URL:http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt  View
13530 3224 CVE-2001-0406 BUGTRAQ:20010418 TSLSA-#2001-0005 - samba  View
13531 3224 CVE-2001-0406 URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html  View
13532 3224 CVE-2001-0406 BUGTRAQ:20010418 PROGENY-SA-2001-05: Samba /tmp vulnerabilities  View
13533 3224 CVE-2001-0406 URL:http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html  View
13534 3224 CVE-2001-0406 CONECTIVA:CLA-2001:395  View
13535 3224 CVE-2001-0406 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395  View
13536 3224 CVE-2001-0406 FREEBSD:FreeBSD-SA-01:36  View
13537 3224 CVE-2001-0406 URL:http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html  View
13538 3224 CVE-2001-0406 MANDRAKE:MDKSA-2001:040  View
13539 3224 CVE-2001-0406 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3  View
13540 3224 CVE-2001-0406 CERT-VN:VU#670568  View
13541 3224 CVE-2001-0406 URL:http://www.kb.cert.org/vuls/id/670568  View
13542 3224 CVE-2001-0406 BID:2617  View

Related JVN