CVE-2009-2813
CVE-2009-2813
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
EPSS 2,7% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
samba Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:3.4.2-1
Mettez à jour vers 2:3.4.2-1
samba Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:3.4.2-1
Mettez à jour vers 2:3.4.2-1
samba Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:3.4.2-1
Mettez à jour vers 2:3.4.2-1
Sources originales
- http://marc.info/?l=bugtraq&m=126514298313071&w=2
- http://news.samba.org/releases/3.4.2/
- http://www.securityfocus.com/archive/1/507856/100/0/threaded
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191
- http://news.samba.org/releases/3.2.15/
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1
- http://www.vupen.com/english/advisories/2009/2810
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439
- http://secunia.com/advisories/37428
- http://secunia.com/advisories/36937
- http://www.ubuntu.com/usn/USN-839-1
- http://news.samba.org/releases/3.0.37/
- http://www.samba.org/samba/security/CVE-2009-2813.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257
- http://support.apple.com/kb/HT3865
- http://www.securityfocus.com/bid/36363
- http://secunia.com/advisories/36918
- http://secunia.com/advisories/36701
- http://secunia.com/advisories/36893
- http://news.samba.org/releases/3.3.8/
- http://secunia.com/advisories/36953
- https://nvd.nist.gov/vuln/detail/CVE-2009-2813