Samba vulnerability

2009-01-0500:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

0.806 High

EPSS

Percentile

98.3%

JSON

Releases

Ubuntu 8.10

Packages

samba -

Details

Gunter Höckel discovered that Samba with registry shares enabled did not
properly validate share names. An authenticated user could gain access to the
root filesystem by using an older version of smbclient and specifying an
empty string as a share name. This is only an issue if registry shares are
enabled on the server by setting “registry shares = yes”, “include = registry”,
or “config backend = registry”, which is not the default.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchsamba< 2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchlibpam-smbpass< 2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchlibsmbclient< 2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchlibsmbclient< dev-2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchlibwbclient0< 2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchsamba< common-2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchsamba< dbg-2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchsamba< tools-2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchsmbclient< 2:3.2.3-1ubuntu3.4UNKNOWN
Ubuntu8.10noarchsmbfs< 2:3.2.3-1ubuntu3.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	samba	< 2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	libpam-smbpass	< 2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	libsmbclient	< 2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	libsmbclient	< dev-2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	libwbclient0	< 2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	samba	< common-2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	samba	< dbg-2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	samba	< tools-2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	smbclient	< 2:3.2.3-1ubuntu3.4	UNKNOWN
Ubuntu	8.10	noarch	smbfs	< 2:3.2.3-1ubuntu3.4	UNKNOWN