NVD

Id
78597  
Name
CVE-2001-1162  
Description
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2001-06-23  
Modified Date
2008-09-05  
Seq
2001-1162  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
392827 78597 CVE-2001-1162 20011002-01-P  View
392828 78597 CVE-2001-1162 L-105  View
392829 78597 CVE-2001-1162 CLA-2001:405  View
392830 78597 CVE-2001-1162 IMNX-2001-70-027-01  View
392831 78597 CVE-2001-1162 http://us1.samba.org/samba/whatsnew/macroexploit.html  View
392832 78597 CVE-2001-1162 CSSA-2001-024.0  View
392833 78597 CVE-2001-1162 DSA-065  View
392834 78597 CVE-2001-1162 MDKSA-2001-062  View
392835 78597 CVE-2001-1162 RHSA-2001:086  View
392836 78597 CVE-2001-1162 HPSBUX0107-157  View
392837 78597 CVE-2001-1162 20010623 smbd remote file creation vulnerability  View
392838 78597 CVE-2001-1162 2928  View
392839 78597 CVE-2001-1162 samba-netbios-file-creation(6731)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64127 JVNDB-2001-000101 Samba における任意のファイルを作成される脆弱性 Samba において、NetBIOS のホスト名を確認する機構に Log file = /var/log/samba/%m と設定している場合に、 UNIX パス名を含ませることで、任意のファイルが上書き可能な脆弱性が存在します。 CVE-2001-1162 3966 CVE-2001-1162 78597 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000101.html 2001-06-23 2007-04-01 View