Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.
Summary
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 78
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* | 3.0.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* | 3.0.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* | 3.0.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* | 3.0.14a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:* | 3.0.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:* | 3.0.16 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:* | 3.0.17 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:* | 3.0.18 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:* | 3.0.19 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* | 3.0.20 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* Versions 3.0.14a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:* Versions 3.0.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:* Versions 3.0.18 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:* Versions 3.0.19 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* Versions 3.0.20 Vulnerable ·Samba
Show 68 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* | 3.0.20a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* | 3.0.20b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* | 3.0.21 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* | 3.0.21a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* | 3.0.21b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* | 3.0.21c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* | 3.0.22 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* | 3.0.23 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* | 3.0.23a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* | 3.0.23b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* | 3.0.23c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* | 3.0.23d | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* | 3.0.24 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* | 3.0.25 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* | 3.0.25 pre1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* | 3.0.25 pre2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* | 3.0.25 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* | 3.0.25 rc2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* | 3.0.25 rc3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* | 3.0.25a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* | 3.0.25b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* | 3.0.25c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* | 3.0.26 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* | 3.0.26a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* | 3.0.27 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:* | 3.0.27a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* | 3.0.28 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:* | 3.0.28a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* | 3.0.29 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* | 3.0.30 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* | 3.0.31 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* | 3.0.32 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* | 3.0.33 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* | 3.0.34 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* | 3.0.35 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* | 3.0.36 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* | 3.2.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* | 3.2.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* | 3.2.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* | 3.2.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* | 3.2.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* | 3.2.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* | 3.2.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* | 3.2.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* | 3.2.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* | 3.2.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* | 3.2.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:* | 3.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* | 3.3.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* | 3.3.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* | 3.3.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* | 3.3.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:* | 3.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* | 3.4.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* | 3.4.1 | Vulnerable | Samba |
| cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:* | 10.5.8 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:* | 10.5.8 | Vulnerable | Apple |
| cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:* | 11 | Vulnerable | Fedoraproject |
- cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* Versions 3.0.20a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* Versions 3.0.20b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* Versions 3.0.21 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* Versions 3.0.21a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* Versions 3.0.21b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* Versions 3.0.21c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* Versions 3.0.22 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* Versions 3.0.23 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* Versions 3.0.23a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* Versions 3.0.23b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* Versions 3.0.23c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* Versions 3.0.23d Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* Versions 3.0.24 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* Versions 3.0.25 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* Versions 3.0.25 pre1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* Versions 3.0.25 pre2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* Versions 3.0.25 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* Versions 3.0.25 rc2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* Versions 3.0.25 rc3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* Versions 3.0.25a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* Versions 3.0.25b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* Versions 3.0.25c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* Versions 3.0.26 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* Versions 3.0.26a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* Versions 3.0.27 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:* Versions 3.0.27a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* Versions 3.0.28 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:* Versions 3.0.28a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* Versions 3.0.29 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* Versions 3.0.30 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* Versions 3.0.31 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* Versions 3.0.32 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* Versions 3.0.33 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* Versions 3.0.34 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* Versions 3.0.35 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* Versions 3.0.36 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* Versions 3.2.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* Versions 3.2.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* Versions 3.2.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Samba
- cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Vulnerable ·Apple
- cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:* Versions 11 Vulnerable ·Fedoraproject
Remediation
Red Hat 2 advisories
- RHSA-2009:1585 Released 2009-11-16 · Red Hat rating Moderatesamba3x security and bug fix update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
- Red Hat Enterprise Linux Server Supplementary (v. 5) libsmbclient-3.0.34-46.el5, libsmbclient-devel-3.0.34-46.el5, libtalloc-1.2.0-46.el5 +12
- RHSA-2009:1529 Released 2009-10-27 · Red Hat rating Moderatesamba security update
- Red Hat Enterprise Linux (v. 5 server) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-3.0.33-3.15.el5_4.ia64 +13
- Red Hat Enterprise Linux AS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) samba-3.0.33-3.15.el5_4, samba-3.0.33-3.15.el5_4.i386, samba-client-3.0.33-3.15.el5_4 +5
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-client-3.0.33-0.18.el4_8 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.33-0.18.el4_8, samba-3.0.33-0.18.el4_8.i386, samba-3.0.33-0.18.el4_8.ia64 +9
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2009:1585 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2009:1529 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2009:1585 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2009:1529 |
Timeline
- 2026-10-02 Threatist record created from CVE-2009-2813
- 2026-10-03 Alias added: GHSA-2hg7-9ph2-q8p9
References
Advisory 11
Other 10
- http://news.samba.org/releases/3.4.2/
- oval:org.mitre.oval:def:9191
- http://news.samba.org/releases/3.2.15/
- http://news.samba.org/releases/3.0.37/
- oval:org.mitre.oval:def:7257
- http://news.samba.org/releases/3.3.8/
- http://wiki.rpath.com/Advisories:rPSA-2009-0145
- oval:org.mitre.oval:def:7211
- oval:org.mitre.oval:def:7791
- 57955
Sources
- CVE-2009-2813 · CVE Program
- CVE-2009-2813 · NVD
- FIRST EPSS
- GHSA-2hg7-9ph2-q8p9 · GitHub Advisory Database · CC BY 4.0
- CVE-2009-2813 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences