NVD

Id
71239  
Name
CVE-2004-0815  
Description
The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0815  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368061 71239 CVE-2004-0815 CLA-2004:873  View
368062 71239 CVE-2004-0815 20040930 Samba Security Announcement -- Potential Arbitrary File Access  View
368063 71239 CVE-2004-0815 101584  View
368064 71239 CVE-2004-0815 57664  View
368065 71239 CVE-2004-0815 200529  View
368066 71239 CVE-2004-0815 http://us4.samba.org/samba/news/#security_2.2.12  View
368067 71239 CVE-2004-0815 DSA-600  View
368068 71239 CVE-2004-0815 20040930 Samba Arbitrary File Access Vulnerability  View
368069 71239 CVE-2004-0815 MDKSA-2004:104  View
368070 71239 CVE-2004-0815 SUSE-SA:2004:035  View
368071 71239 CVE-2004-0815 RHSA-2004:498  View
368072 71239 CVE-2004-0815 20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)  View
368073 71239 CVE-2004-0815 11281  View
368074 71239 CVE-2004-0815 2004-0051  View
368075 71239 CVE-2004-0815 samba-file-access(17556)  View
368076 71239 CVE-2004-0815 FLSA:2102  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63069 JVNDB-2004-000411 Samba のパス変換ルーチンにおける共有制限を回避される脆弱性 Samba には、ファイルパスを取り扱う際の変換ルーチンで unix_clean_name() 関数が 2 回呼び出されており、これにより共有外のファイルに対してのアクセスを許可してしまう脆弱性が存在します。 CVE-2004-0815 9242 CVE-2004-0815 71239 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000411.html 2004-09-30 2007-04-01 View