client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify…
Priority LOW 12CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Why it matters now
EPSS 0.00484 41st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 123
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | up to 3.4.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:* | 1.9.17 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:* | 1.9.17 p1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:p2:*:*:*:*:*:* | 1.9.17 p2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:* | 1.9.17 p3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:* | 1.9.17 p4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:* | 1.9.17 p5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:* | 1.9.18 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:* | 1.9.18 p1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:* | 1.9.18 p10 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions up to 3.4.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:* Versions 1.9.17 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:* Versions 1.9.17 p1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:p2:*:*:*:*:*:* Versions 1.9.17 p2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:* Versions 1.9.17 p3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:* Versions 1.9.17 p4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:* Versions 1.9.17 p5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:* Versions 1.9.18 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:* Versions 1.9.18 p1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:* Versions 1.9.18 p10 Vulnerable ·Samba
Show 113 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:* | 1.9.18 p2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:* | 1.9.18 p3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:* | 1.9.18 p4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:* | 1.9.18 p5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:* | 1.9.18 p6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:* | 1.9.18 p7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:* | 1.9.18 p8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:* | 2.2.0a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:* | 2.2.1a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:* | 2.2.3a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:* | 2.2.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:* | 2.2.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:* | 2.2.7a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:* | 2.2.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:* | 2.2.8a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:* | 2.2.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.10:*:*:*:*:*:*:* | 2.2.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:* | 2.2.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2.12:*:*:*:*:*:*:* | 2.2.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:* | 2.2a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* | 3.0.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* | 3.0.2a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* | 3.0.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* | 3.0.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* | 3.0.4 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* | 3.0.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* | 3.0.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:* | 3.0.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:* | 3.0.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:* | 3.0.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:* | 3.0.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* | 3.0.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* | 3.0.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* | 3.0.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* | 3.0.14a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* | 3.0.20 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* | 3.0.20a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* | 3.0.20b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* | 3.0.21 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* | 3.0.21a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* | 3.0.21b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* | 3.0.21c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* | 3.0.22 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* | 3.0.23 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* | 3.0.23a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* | 3.0.23b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* | 3.0.23c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* | 3.0.23d | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* | 3.0.24 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* | 3.0.25 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* | 3.0.25 pre1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* | 3.0.25 pre2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* | 3.0.25 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* | 3.0.25 rc2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* | 3.0.25 rc3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* | 3.0.25a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* | 3.0.25b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* | 3.0.25c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* | 3.0.26 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* | 3.0.26a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* | 3.0.27 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:* | 3.0.27a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* | 3.0.28 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:* | 3.0.28a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* | 3.0.29 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* | 3.0.30 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* | 3.0.31 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* | 3.0.32 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* | 3.0.33 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* | 3.0.34 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* | 3.0.35 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* | 3.0.36 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:* | 3.0.37 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* | 3.2.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* | 3.2.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* | 3.2.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* | 3.2.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* | 3.2.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* | 3.2.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* | 3.2.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* | 3.2.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* | 3.2.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* | 3.2.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* | 3.2.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* | 3.3.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* | 3.3.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* | 3.3.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* | 3.3.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:* | 3.3.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:* | 3.3.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:* | 3.3.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* | 3.4.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* | 3.4.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:* | 3.4.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:* | 3.4.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:* | 3.4.4 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:* Versions 1.9.18 p2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:* Versions 1.9.18 p3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:* Versions 1.9.18 p4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:* Versions 1.9.18 p5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:* Versions 1.9.18 p6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:* Versions 1.9.18 p7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:* Versions 1.9.18 p8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:* Versions 2.2.0a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:* Versions 2.2.1a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:* Versions 2.2.3a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:* Versions 2.2.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:* Versions 2.2.7a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:* Versions 2.2.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:* Versions 2.2.8a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:* Versions 2.2.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.10:*:*:*:*:*:*:* Versions 2.2.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:* Versions 2.2.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2.12:*:*:*:*:*:*:* Versions 2.2.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:* Versions 2.2a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* Versions 3.0.2a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* Versions 3.0.4 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* Versions 3.0.14a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* Versions 3.0.20 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* Versions 3.0.20a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* Versions 3.0.20b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* Versions 3.0.21 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* Versions 3.0.21a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* Versions 3.0.21b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* Versions 3.0.21c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* Versions 3.0.22 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* Versions 3.0.23 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* Versions 3.0.23a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* Versions 3.0.23b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* Versions 3.0.23c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* Versions 3.0.23d Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* Versions 3.0.24 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* Versions 3.0.25 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* Versions 3.0.25 pre1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* Versions 3.0.25 pre2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* Versions 3.0.25 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* Versions 3.0.25 rc2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* Versions 3.0.25 rc3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* Versions 3.0.25a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* Versions 3.0.25b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* Versions 3.0.25c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* Versions 3.0.26 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* Versions 3.0.26a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* Versions 3.0.27 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:* Versions 3.0.27a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* Versions 3.0.28 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:* Versions 3.0.28a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* Versions 3.0.29 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* Versions 3.0.30 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* Versions 3.0.31 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* Versions 3.0.32 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* Versions 3.0.33 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* Versions 3.0.34 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* Versions 3.0.35 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* Versions 3.0.36 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:* Versions 3.0.37 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* Versions 3.2.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* Versions 3.2.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* Versions 3.2.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:* Versions 3.3.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:* Versions 3.3.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:* Versions 3.4.4 Vulnerable ·Samba
Remediation
Red Hat 1 advisory
- RHSA-2011:1219 Released 2011-08-29 · Red Hat rating Moderatesamba security update
- RHEL Desktop Workstation (v. 5 client) libsmbclient-devel-3.0.33-3.29.el5_7.4, libsmbclient-devel-3.0.33-3.29.el5_7.4.i386, samba-3.0.33-3.29.el5_7.4
- Red Hat Enterprise Linux (v. 5 server) libsmbclient-3.0.33-3.29.el5_7.4, libsmbclient-3.0.33-3.29.el5_7.4.i386, libsmbclient-3.0.33-3.29.el5_7.4.ia64 +21
- Red Hat Enterprise Linux AS version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libsmbclient-3.0.33-3.29.el5_7.4, libsmbclient-3.0.33-3.29.el5_7.4.i386, samba-3.0.33-3.29.el5_7.4 +7
- Red Hat Enterprise Linux Desktop version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-client-3.0.33-0.34.el4 +5
- Red Hat Enterprise Linux ES version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +9
- Red Hat Enterprise Linux WS version 4 samba-3.0.33-0.34.el4, samba-3.0.33-0.34.el4.i386, samba-3.0.33-0.34.el4.ia64 +9
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | — |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2011:1219 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2011:1219 |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-0547
- 2026-10-03 Alias added: GHSA-xppx-r8rj-fw45
References
More Samba vulnerabilities
- TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2017-05139 Code injection in samba KEVCVSS 3.1CRITICAL 9.8
- TI-2015-00210 The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x… CVSS 2.0HIGH 10.0
- TI-2003-00081 Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in… CVSS 2.0HIGH 10.0
- TI-2003-00185 Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before… CVSS 2.0HIGH 10.0
- TI-2007-02362 Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through… CVSS 2.0HIGH 10.0
Sources
- CVE-2010-0547 · CVE Program
- CVE-2010-0547 · NVD
- FIRST EPSS
- GHSA-xppx-r8rj-fw45 · GitHub Advisory Database · CC BY 4.0
- CVE-2010-0547 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences