NetSight
IP …
critical10.0Public exploit code

CVE-2001-1162

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.

Affected products

VendorProductAffected versions
SambaSamba
Versions 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.2.0
HpCifs-9000 Server
Versions a.01.05, a.01.06

References