NVD

Id
50036  
Name
CVE-2009-2813  
Description
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-14  
Modified Date
2016-08-22  
Seq
2009-2813  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253137 50036 CVE-2009-2813 APPLE-SA-2009-09-10-2  View
253138 50036 CVE-2009-2813 SUSE-SR:2009:017  View
253139 50036 CVE-2009-2813 SSRT090212  View
253140 50036 CVE-2009-2813 http://news.samba.org/releases/3.0.37/  View
253141 50036 CVE-2009-2813 http://news.samba.org/releases/3.2.15/  View
253142 50036 CVE-2009-2813 http://news.samba.org/releases/3.3.8/  View
253143 50036 CVE-2009-2813 http://news.samba.org/releases/3.4.2/  View
253144 50036 CVE-2009-2813 oval:org.mitre.oval:def:7211  View
253145 50036 CVE-2009-2813 oval:org.mitre.oval:def:7257  View
253146 50036 CVE-2009-2813 oval:org.mitre.oval:def:7791  View
253147 50036 CVE-2009-2813 oval:org.mitre.oval:def:9191  View
253148 50036 CVE-2009-2813 SSA:2009-276-01  View
253149 50036 CVE-2009-2813 1021111  View
253150 50036 CVE-2009-2813 http://support.apple.com/kb/HT3865  View
253151 50036 CVE-2009-2813 http://wiki.rpath.com/Advisories:rPSA-2009-0145  View
253152 50036 CVE-2009-2813 http://www.samba.org/samba/security/CVE-2009-2813.html  View
253153 50036 CVE-2009-2813 20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat  View
253154 50036 CVE-2009-2813 36363  View
253155 50036 CVE-2009-2813 USN-839-1  View
253156 50036 CVE-2009-2813 ADV-2009-2810  View
253157 50036 CVE-2009-2813 macosx-smb-security-bypass(53174)  View
253158 50036 CVE-2009-2813 FEDORA-2009-10180  View
253159 50036 CVE-2009-2813 FEDORA-2009-10172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41131 JVNDB-2009-002138 Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性 Apple Mac OS の SMB サブシステムには、Windows ファイル共有が有効な場合に、パス名解決のエラーの処理に不備があるため、ファイル共有の制限を回避され、ファイルの読み込み、作成、または更新が可能な脆弱性が存在します。 CVE-2009-2813 40244 CVE-2009-2813 50036 6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002138.html 2009-09-10 2010-07-20 View