Lucene search
RootSSV:12451HistoryOct 12, 2009 - 12:00 a.m.
Samba错误配置/etc/passwd文件绕过安全限制漏洞
2009-10-1200:00:00
Root
www.seebug.org
16
0.007 Low
EPSS
Percentile
77.7%
BUGTRAQ ID: 36363
CVE ID: CVE-2009-2813
Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。
如果/etc/passwd中的用户错误的配置为拥有空的主目录（::）且启用了自动[homes]共享，或用该用户名创建了明确的共享，则任何连接到该共享名的客户端都可以访问root（/）之下的整个文件系统。
Samba Samba 3.4
Samba Samba 3.3
Samba Samba 3.2
Samba Samba 3.0
临时解决方法：
- 不要对/etc/passwd中的用户配置空的主目录字符。
厂商补丁：
Samba
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.samba.org/samba/ftp/stable/samba-3.0.37.tar.gz
http://www.samba.org/samba/ftp/stable/samba-3.2.15.tar.gz
http://www.samba.org/samba/ftp/stable/samba-3.3.8.tar.gz
http://www.samba.org/samba/ftp/stable/samba-3.4.2.tar.gz
Related
prion
prion
Design/Logic Flaw
2009-09-14 16:30:00
openvas
openvas
HP-UX Update for HP CIFS Server (Samba) HPSBUX02479
2010-02-08 00:00:00
HP-UX Update for HP CIFS Server (Samba) HPSBUX02479
2010-02-08 00:00:00
SLES9: Security update for Samba
2009-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2009-2813
2009-09-14 00:00:00
cve
cve
CVE-2009-2813
2009-09-14 16:30:00
debiancve
debiancve
CVE-2009-2813
2009-09-14 16:30:00
samba
samba
Misconfigured /etc/passwd file may share folders unexpectedly
2009-10-01 00:00:00
veracode
veracode
Access Restriction Bypass
2020-04-10 00:39:57
nessus
nessus
SuSE 10 Security Update : Samba (ZYPP Patch Number 6518)
2009-10-23 00:00:00
Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities
2009-10-02 00:00:00
Debian DSA-1908-1 : samba - several vulnerabilities
2010-02-24 00:00:00
slackware
slackware
samba
2009-10-04 00:01:26
securityvulns
securityvulns
Samba multiple security vulnerabilities
2009-10-14 00:00:00
[SECURITY] [DSA 1908-1] New samba packages fix several vulnerabilities
2009-10-14 00:00:00
debian
debian
[SECURITY] [DSA 1908-1] New samba packages fix several vulnerabilities
2009-10-14 02:10:44
altlinux
altlinux
Security fix for the ALT Linux 6 package samba version 3.0.37-alt1
2009-10-01 00:00:00
Security fix for the ALT Linux 5 package samba version 3.0.37-alt1
2009-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: samba-3.4.2-0.42.fc11
2009-10-03 18:59:38
[SECURITY] Fedora 11 Update: samba-3.4.5-0.47.fc11
2010-01-29 03:24:41
[SECURITY] Fedora 10 Update: samba-3.2.15-0.36.fc10
2009-10-03 18:57:48
osv
osv
samba - several vulnerabilities
2009-10-14 00:00:00
oraclelinux
oraclelinux
samba security update
2009-10-27 00:00:00
centos
centos
samba security update
2009-10-27 19:23:21
redhat
redhat
(RHSA-2009:1529) Moderate: samba security update
2009-10-27 00:00:00
(RHSA-2009:1585) Moderate: samba3x security and bug fix update
2009-11-16 00:00:00
ubuntu
ubuntu
Samba vulnerabilities
2009-10-01 00:00:00
vmware
vmware
ESX Service Console updates for samba and acpid
2010-04-01 00:00:00
ESX Service Console updates for samba and acpid
2010-04-01 00:00:00
seebug
seebug
Apple Mac OS X 2009-005更新修复多个安全漏洞
2009-09-16 00:00:00