CVE

Id
3966  
CVE No.
CVE-2001-1162  
Status
Entry  
Description
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18320 3966 CVE-2001-1162 BUGTRAQ:20010623 smbd remote file creation vulnerability  View
18321 3966 CVE-2001-1162 URL:http://www.securityfocus.com/archive/1/193027  View
18322 3966 CVE-2001-1162 CONFIRM:http://us1.samba.org/samba/whatsnew/macroexploit.html  View
18323 3966 CVE-2001-1162 MANDRAKE:MDKSA-2001-062  View
18324 3966 CVE-2001-1162 URL:http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-062.php3  View
18325 3966 CVE-2001-1162 HP:HPSBUX0107-157  View
18326 3966 CVE-2001-1162 URL:http://www.securityfocus.com/advisories/3423  View
18327 3966 CVE-2001-1162 SGI:20011002-01-P  View
18328 3966 CVE-2001-1162 URL:ftp://patches.sgi.com/support/free/security/advisories/20011002-01-P  View
18329 3966 CVE-2001-1162 CIAC:L-105  View
18330 3966 CVE-2001-1162 URL:http://ciac.llnl.gov/ciac/bulletins/l-105.shtml  View
18331 3966 CVE-2001-1162 IMMUNIX:IMNX-2001-70-027-01  View
18332 3966 CVE-2001-1162 URL:http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-027-01  View
18333 3966 CVE-2001-1162 CALDERA:CSSA-2001-024.0  View
18334 3966 CVE-2001-1162 URL:http://www.calderasystems.com/support/security/advisories/CSSA-2001-024.0.txt  View
18335 3966 CVE-2001-1162 CONECTIVA:CLA-2001:405  View
18336 3966 CVE-2001-1162 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000405  View
18337 3966 CVE-2001-1162 REDHAT:RHSA-2001:086  View
18338 3966 CVE-2001-1162 URL:http://www.redhat.com/support/errata/RHSA-2001-086.html  View
18339 3966 CVE-2001-1162 DEBIAN:DSA-065  View
18340 3966 CVE-2001-1162 URL:http://www.debian.org/security/2001/dsa-065  View
18341 3966 CVE-2001-1162 BID:2928  View
18342 3966 CVE-2001-1162 URL:http://www.securityfocus.com/bid/2928  View
18343 3966 CVE-2001-1162 XF:samba-netbios-file-creation(6731)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64127 JVNDB-2001-000101 Samba における任意のファイルを作成される脆弱性 Samba において、NetBIOS のホスト名を確認する機構に Log file = /var/log/samba/%m と設定している場合に、 UNIX パス名を含ませることで、任意のファイルが上書き可能な脆弱性が存在します。 CVE-2001-1162 3966 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000101.html  View