CVE-2009-0022

EPSS 4.43%
Published 05.01.2009 20:30:02
Last modified 09.04.2025 00:30:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.

Affected products Warnungen 0 Metrics 2 CWE 1 References 16

Data is provided by the National Vulnerability Database (NVD)

Samba ≫ Samba Version3.2.0

Samba ≫ Samba Version3.2.1

Samba ≫ Samba Version3.2.2

Samba ≫ Samba Version3.2.3

Samba ≫ Samba Version3.2.4

Samba ≫ Samba Version3.2.5

Samba ≫ Samba Version3.2.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	4.43%	0.879

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.3	6.8	6.9	AV:N/AC:M/Au:S/C:C/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022.patch

http://osvdb.org/51152

http://secunia.com/advisories/33379

Vendor Advisory

http://secunia.com/advisories/33392

http://secunia.com/advisories/33431

http://www.mandriva.com/security/advisories?name=MDVSA-2009:042

http://www.samba.org/samba/security/CVE-2009-0022.html

http://www.securityfocus.com/bid/33118

http://www.securitytracker.com/id?1021513

http://www.vupen.com/english/advisories/2009/0017

https://exchange.xforce.ibmcloud.com/vulnerabilities/47733