low2.1Public exploit code
CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient,…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samba 2.0.x - Insecure TMP File Symbolic Link2001-04-17 · local · linux · Verified
Impact
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | through 2.0.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html
- http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395
- http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt
- http://www.debian.org/security/2001/dsa-048
- http://www.kb.cert.org/vuls/id/670568
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3
- http://www.securityfocus.com/bid/2617
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html
- http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395
- http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt
- http://www.debian.org/security/2001/dsa-048
- http://www.kb.cert.org/vuls/id/670568
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3
- http://www.securityfocus.com/bid/2617