CVE-2004-0815
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.9%
The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.
Produtos afetados
n/a · n/aReferências
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873http://marc.info/?l=bugtraq&m=109655827913457&w=2https://bugzilla.fedora.us/show_bug.cgi?id=2102https://exchange.xforce.ibmcloud.com/vulnerabilities/17556http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1http://us4.samba.org/samba/news/#security_2.2.12http://www.debian.org/security/2004/dsa-600http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=truehttp://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104http://www.novell.com/linux/security/advisories/2004_35_samba.html