Vulnerability-Lookup

CVE-2004-0815 (GCVE-0-2004-0815)

Vulnerability from cvelistv5 – Published: 2004-10-16 04:00 – Updated: 2024-08-08 00:31

Summary

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://us4.samba.org/samba/news/#security_2.2.12	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://marc.info/?l=bugtraq&m=109655827913457&w=2	mailing-listx_refsource_BUGTRAQ
	https://bugzilla.fedora.us/show_bug.cgi?id=2102	vendor-advisoryx_refsource_FEDORA
	http://www.idefense.com/application/poi/display?i…	third-party-advisoryx_refsource_IDEFENSE
	http://www.securityfocus.com/archive/1/377618	mailing-listx_refsource_BUGTRAQ
	http://www.debian.org/security/2004/dsa-600	vendor-advisoryx_refsource_DEBIAN
	http://www.redhat.com/support/errata/RHSA-2004-498.html	vendor-advisoryx_refsource_REDHAT
	http://distro.conectiva.com.br/atualizacoes/?id=a…	vendor-advisoryx_refsource_CONECTIVA
	http://www.securityfocus.com/bid/11281	vdb-entryx_refsource_BID
	http://www.mandrakesecure.net/en/advisories/advis…	vendor-advisoryx_refsource_MANDRAKE
	http://www.trustix.org/errata/2004/0051/	vendor-advisoryx_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
	http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:31:47.853Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://us4.samba.org/samba/news/#security_2.2.12"
          },
          {
            "name": "200529",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
          },
          {
            "name": "20040930 Samba Security Announcement -- Potential Arbitrary File Access",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
          },
          {
            "name": "FLSA:2102",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
          },
          {
            "name": "20040930 Samba Arbitrary File Access Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
          },
          {
            "name": "20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/377618"
          },
          {
            "name": "DSA-600",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2004/dsa-600"
          },
          {
            "name": "RHSA-2004:498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
          },
          {
            "name": "CLA-2004:873",
            "tags": [
              "vendor-advisory",
              "x_refsource_CONECTIVA",
              "x_transferred"
            ],
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
          },
          {
            "name": "11281",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11281"
          },
          {
            "name": "MDKSA-2004:104",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
          },
          {
            "name": "2004-0051",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2004/0051/"
          },
          {
            "name": "57664",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
          },
          {
            "name": "101584",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
          },
          {
            "name": "SUSE-SA:2004:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
          },
          {
            "name": "samba-file-access(17556)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-09-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://us4.samba.org/samba/news/#security_2.2.12"
        },
        {
          "name": "200529",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
        },
        {
          "name": "20040930 Samba Security Announcement -- Potential Arbitrary File Access",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
        },
        {
          "name": "FLSA:2102",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
        },
        {
          "name": "20040930 Samba Arbitrary File Access Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
        },
        {
          "name": "20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/377618"
        },
        {
          "name": "DSA-600",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2004/dsa-600"
        },
        {
          "name": "RHSA-2004:498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
        },
        {
          "name": "CLA-2004:873",
          "tags": [
            "vendor-advisory",
            "x_refsource_CONECTIVA"
          ],
          "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
        },
        {
          "name": "11281",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11281"
        },
        {
          "name": "MDKSA-2004:104",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
        },
        {
          "name": "2004-0051",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2004/0051/"
        },
        {
          "name": "57664",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
        },
        {
          "name": "101584",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
        },
        {
          "name": "SUSE-SA:2004:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
        },
        {
          "name": "samba-file-access(17556)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0815",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://us4.samba.org/samba/news/#security_2.2.12",
              "refsource": "CONFIRM",
              "url": "http://us4.samba.org/samba/news/#security_2.2.12"
            },
            {
              "name": "200529",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
            },
            {
              "name": "20040930 Samba Security Announcement -- Potential Arbitrary File Access",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
            },
            {
              "name": "FLSA:2102",
              "refsource": "FEDORA",
              "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
            },
            {
              "name": "20040930 Samba Arbitrary File Access Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
            },
            {
              "name": "20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/377618"
            },
            {
              "name": "DSA-600",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2004/dsa-600"
            },
            {
              "name": "RHSA-2004:498",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
            },
            {
              "name": "CLA-2004:873",
              "refsource": "CONECTIVA",
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
            },
            {
              "name": "11281",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11281"
            },
            {
              "name": "MDKSA-2004:104",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
            },
            {
              "name": "2004-0051",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2004/0051/"
            },
            {
              "name": "57664",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
            },
            {
              "name": "101584",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
            },
            {
              "name": "SUSE-SA:2004:035",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
            },
            {
              "name": "samba-file-access(17556)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0815",
    "datePublished": "2004-10-16T04:00:00",
    "dateReserved": "2004-08-25T00:00:00",
    "dateUpdated": "2024-08-08T00:31:47.853Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"65AC9643-E1A5-4013-9607-17C6CC7CC63B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"090E2541-2DBA-41CB-A792-9E703C797949\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"19F65FF3-71F8-4278-A823-A6E0FF65D9F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C71CB60-2689-4A4A-9509-E2F3135E6491\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0129E404-3AE8-4F0E-89CB-7F2FA5B47011\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"614547F5-9C3F-489B-9B72-91B0FF646CCC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A052141C-874D-4ED0-99FB-D7468FACFC6E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9739EA65-9FA8-425E-B355-E690773D5B1B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3B618F94-DAC2-4A97-9F7F-8BCEA3199769\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EEE7C057-B024-4417-B572-5D396366620E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CFCD334C-FB95-41A6-8F4C-FCC4E70CE930\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"75C86202-3150-440C-B048-BB039E9D3606\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F84FB25B-5EA5-48DC-B528-E8CCF714C919\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"216145B7-4716-42F7-90DC-03884ECB2271\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"898968E5-577E-4B86-A804-EBEC67157A61\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"920EF846-41D1-429D-AF0F-3D7950F93069\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \\\"/.////\\\" style sequences in pathnames.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n unix_clena_name en Samba 2.2.x a 2.2.11, y 3.0.x anterirores a 3.0.2a, recorta ciertos nombres de directorio a sus rutas absolutas, lo que podr\\u00eda permitir a atacantes evitar la restricticiones de espeficadas de lectura, ejecuci\\u00f3n y listado de carpetas compartidas mediante secuencias del estilo \\\"/.////\\\" en rutas.\"}]",
      "id": "CVE-2004-0815",
      "lastModified": "2024-11-20T23:49:28.753",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": true, \"userInteractionRequired\": false}]}",
      "published": "2004-11-03T05:00:00.000",
      "references": "[{\"url\": \"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://us4.samba.org/samba/news/#security_2.2.12\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2004/dsa-600\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2004_35_samba.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2004-498.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/archive/1/377618\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/11281\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.trustix.org/errata/2004/0051/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://bugzilla.fedora.us/show_bug.cgi?id=2102\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://us4.samba.org/samba/news/#security_2.2.12\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2004/dsa-600\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.novell.com/linux/security/advisories/2004_35_samba.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2004-498.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/377618\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/11281\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.trustix.org/errata/2004/0051/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bugzilla.fedora.us/show_bug.cgi?id=2102\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2004-0815\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2004-11-03T05:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \\\"/.////\\\" style sequences in pathnames.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n unix_clena_name en Samba 2.2.x a 2.2.11, y 3.0.x anterirores a 3.0.2a, recorta ciertos nombres de directorio a sus rutas absolutas, lo que podr\u00eda permitir a atacantes evitar la restricticiones de espeficadas de lectura, ejecuci\u00f3n y listado de carpetas compartidas mediante secuencias del estilo \\\"/.////\\\" en rutas.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65AC9643-E1A5-4013-9607-17C6CC7CC63B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"090E2541-2DBA-41CB-A792-9E703C797949\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19F65FF3-71F8-4278-A823-A6E0FF65D9F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C71CB60-2689-4A4A-9509-E2F3135E6491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0129E404-3AE8-4F0E-89CB-7F2FA5B47011\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"614547F5-9C3F-489B-9B72-91B0FF646CCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A052141C-874D-4ED0-99FB-D7468FACFC6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9739EA65-9FA8-425E-B355-E690773D5B1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B618F94-DAC2-4A97-9F7F-8BCEA3199769\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEE7C057-B024-4417-B572-5D396366620E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFCD334C-FB95-41A6-8F4C-FCC4E70CE930\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75C86202-3150-440C-B048-BB039E9D3606\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F84FB25B-5EA5-48DC-B528-E8CCF714C919\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"216145B7-4716-42F7-90DC-03884ECB2271\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"898968E5-577E-4B86-A804-EBEC67157A61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"920EF846-41D1-429D-AF0F-3D7950F93069\"}]}]}],\"references\":[{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://us4.samba.org/samba/news/#security_2.2.12\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2004/dsa-600\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2004_35_samba.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2004-498.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/377618\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/11281\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.trustix.org/errata/2004/0051/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.fedora.us/show_bug.cgi?id=2102\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://us4.samba.org/samba/news/#security_2.2.12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2004/dsa-600\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.novell.com/linux/security/advisories/2004_35_samba.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2004-498.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/377618\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/11281\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.trustix.org/errata/2004/0051/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.fedora.us/show_bug.cgi?id=2102\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

GSD-2004-0815

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2004-0815

Aliases

CVE-2004-0815

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2004-0815",
    "description": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames.",
    "id": "GSD-2004-0815",
    "references": [
      "https://www.suse.com/security/cve/CVE-2004-0815.html",
      "https://www.debian.org/security/2004/dsa-600",
      "https://access.redhat.com/errata/RHSA-2004:498"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2004-0815"
      ],
      "details": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames.",
      "id": "GSD-2004-0815",
      "modified": "2023-12-13T01:22:54.640846Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2004-0815",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://us4.samba.org/samba/news/#security_2.2.12",
            "refsource": "CONFIRM",
            "url": "http://us4.samba.org/samba/news/#security_2.2.12"
          },
          {
            "name": "200529",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
          },
          {
            "name": "20040930 Samba Security Announcement -- Potential Arbitrary File Access",
            "refsource": "BUGTRAQ",
            "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
          },
          {
            "name": "FLSA:2102",
            "refsource": "FEDORA",
            "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
          },
          {
            "name": "20040930 Samba Arbitrary File Access Vulnerability",
            "refsource": "IDEFENSE",
            "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
          },
          {
            "name": "20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/377618"
          },
          {
            "name": "DSA-600",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2004/dsa-600"
          },
          {
            "name": "RHSA-2004:498",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
          },
          {
            "name": "CLA-2004:873",
            "refsource": "CONECTIVA",
            "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
          },
          {
            "name": "11281",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/11281"
          },
          {
            "name": "MDKSA-2004:104",
            "refsource": "MANDRAKE",
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
          },
          {
            "name": "2004-0051",
            "refsource": "TRUSTIX",
            "url": "http://www.trustix.org/errata/2004/0051/"
          },
          {
            "name": "57664",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
          },
          {
            "name": "101584",
            "refsource": "SUNALERT",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
          },
          {
            "name": "SUSE-SA:2004:035",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
          },
          {
            "name": "samba-file-access(17556)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0815"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20040930 Samba Arbitrary File Access Vulnerability",
              "refsource": "IDEFENSE",
              "tags": [
                "Exploit",
                "Vendor Advisory"
              ],
              "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
            },
            {
              "name": "CLA-2004:873",
              "refsource": "CONECTIVA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
            },
            {
              "name": "DSA-600",
              "refsource": "DEBIAN",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.debian.org/security/2004/dsa-600"
            },
            {
              "name": "11281",
              "refsource": "BID",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.securityfocus.com/bid/11281"
            },
            {
              "name": "http://us4.samba.org/samba/news/#security_2.2.12",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://us4.samba.org/samba/news/#security_2.2.12"
            },
            {
              "name": "FLSA:2102",
              "refsource": "FEDORA",
              "tags": [],
              "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
            },
            {
              "name": "MDKSA-2004:104",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
            },
            {
              "name": "SUSE-SA:2004:035",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
            },
            {
              "name": "2004-0051",
              "refsource": "TRUSTIX",
              "tags": [],
              "url": "http://www.trustix.org/errata/2004/0051/"
            },
            {
              "name": "20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815)",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/377618"
            },
            {
              "name": "RHSA-2004:498",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
            },
            {
              "name": "101584",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
            },
            {
              "name": "57664",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
            },
            {
              "name": "200529",
              "refsource": "SUNALERT",
              "tags": [],
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
            },
            {
              "name": "20040930 Samba Security Announcement -- Potential Arbitrary File Access",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
            },
            {
              "name": "samba-file-access(17556)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-30T16:25Z",
      "publishedDate": "2004-11-03T05:00Z"
    }
  }
}

RHSA-2004:498

Vulnerability from csaf_redhat - Published: 2004-10-04 15:15 - Updated: 2025-11-21 17:27

Summary

Red Hat Security Advisory: samba security update

Notes

Topic

Updated samba packages that fix an input validation vulnerability are now available.

Details

Samba provides file and printer sharing services to SMB/CIFS clients. Karol Wiesek discovered an input validation issue in Samba prior to 3.0.6. An authenticated user could send a carefully crafted request to the Samba server, which would allow access to files outside of the configured file share. Note: Such files would have to be readable by the account used for the connection. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0815 to this issue. This issue does not affect Red Hat Enterprise Linux 3 as a previous erratum updated to Samba 3.0.6 which is not vulnerable to this issue. Users of Samba should upgrade to these updated packages, which contain an upgrade to Samba-2.2.12, which is not vulnerable to this issue.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated samba packages that fix an input validation vulnerability are now\navailable.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Samba provides file and printer sharing services to SMB/CIFS clients.\n\nKarol Wiesek discovered an input validation issue in Samba prior to 3.0.6.\nAn authenticated user could send a carefully crafted request to the Samba\nserver, which would allow access to files outside of the configured file\nshare.  Note: Such files would have to be readable by the account used\nfor the connection.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0815 to this issue.\n\nThis issue does not affect Red Hat Enterprise Linux 3 as a previous erratum\nupdated to Samba 3.0.6 which is not vulnerable to this issue.\n\nUsers of Samba should upgrade to these updated packages, which contain an\nupgrade to Samba-2.2.12, which is not vulnerable to this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:498",
        "url": "https://access.redhat.com/errata/RHSA-2004:498"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_498.json"
      }
    ],
    "title": "Red Hat Security Advisory: samba security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:27:49+00:00",
      "generator": {
        "date": "2025-11-21T17:27:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2004:498",
      "initial_release_date": "2004-10-04T15:15:00+00:00",
      "revision_history": [
        {
          "date": "2004-10-04T15:15:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-10-04T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:27:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "Red Hat Linux Advanced Workstation 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "Red Hat Enterprise Linux ES version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "Red Hat Enterprise Linux WS version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0815",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "Red Hat Enterprise Linux ES version 2.1",
          "Red Hat Enterprise Linux WS version 2.1",
          "Red Hat Linux Advanced Workstation 2.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0815"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0815"
        }
      ],
      "release_date": "2004-09-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-10-04T15:15:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  Use Red Hat\nNetwork to download and update your packages.  To launch the Red Hat\nUpdate Agent, use the following command:\n\n    up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n    http://www.redhat.com/docs/manuals/enterprise/",
          "product_ids": [
            "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
            "Red Hat Enterprise Linux ES version 2.1",
            "Red Hat Enterprise Linux WS version 2.1",
            "Red Hat Linux Advanced Workstation 2.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:498"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    }
  ]
}

RHSA-2004_498

Vulnerability from csaf_redhat - Published: 2004-10-04 15:15 - Updated: 2024-11-21 23:13

Summary

Red Hat Security Advisory: samba security update

Notes

Topic

Updated samba packages that fix an input validation vulnerability are now available.

Details

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated samba packages that fix an input validation vulnerability are now\navailable.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Samba provides file and printer sharing services to SMB/CIFS clients.\n\nKarol Wiesek discovered an input validation issue in Samba prior to 3.0.6.\nAn authenticated user could send a carefully crafted request to the Samba\nserver, which would allow access to files outside of the configured file\nshare.  Note: Such files would have to be readable by the account used\nfor the connection.  The Common Vulnerabilities and Exposures project\n(cve.mitre.org) has assigned the name CAN-2004-0815 to this issue.\n\nThis issue does not affect Red Hat Enterprise Linux 3 as a previous erratum\nupdated to Samba 3.0.6 which is not vulnerable to this issue.\n\nUsers of Samba should upgrade to these updated packages, which contain an\nupgrade to Samba-2.2.12, which is not vulnerable to this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2004:498",
        "url": "https://access.redhat.com/errata/RHSA-2004:498"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_498.json"
      }
    ],
    "title": "Red Hat Security Advisory: samba security update",
    "tracking": {
      "current_release_date": "2024-11-21T23:13:13+00:00",
      "generator": {
        "date": "2024-11-21T23:13:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2004:498",
      "initial_release_date": "2004-10-04T15:15:00+00:00",
      "revision_history": [
        {
          "date": "2004-10-04T15:15:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2004-10-04T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-21T23:13:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "Red Hat Linux Advanced Workstation 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "Red Hat Enterprise Linux ES version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "Red Hat Enterprise Linux WS version 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2004-0815",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1617303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "Red Hat Enterprise Linux ES version 2.1",
          "Red Hat Enterprise Linux WS version 2.1",
          "Red Hat Linux Advanced Workstation 2.1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2004-0815"
        },
        {
          "category": "external",
          "summary": "RHBZ#1617303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0815",
          "url": "https://www.cve.org/CVERecord?id=CVE-2004-0815"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0815",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0815"
        }
      ],
      "release_date": "2004-09-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2004-10-04T15:15:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.  Use Red Hat\nNetwork to download and update your packages.  To launch the Red Hat\nUpdate Agent, use the following command:\n\n    up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n    http://www.redhat.com/docs/manuals/enterprise/",
          "product_ids": [
            "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
            "Red Hat Enterprise Linux ES version 2.1",
            "Red Hat Enterprise Linux WS version 2.1",
            "Red Hat Linux Advanced Workstation 2.1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2004:498"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    }
  ]
}

FKIE_CVE-2004-0815

Vulnerability from fkie_nvd - Published: 2004-11-03 05:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

References

URL	Tags
cve@mitre.org	http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873	Patch, Vendor Advisory
cve@mitre.org	http://marc.info/?l=bugtraq&m=109655827913457&w=2
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1
cve@mitre.org	http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1
cve@mitre.org	http://us4.samba.org/samba/news/#security_2.2.12
cve@mitre.org	http://www.debian.org/security/2004/dsa-600	Patch, Vendor Advisory
cve@mitre.org	http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true	Exploit, Vendor Advisory
cve@mitre.org	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104
cve@mitre.org	http://www.novell.com/linux/security/advisories/2004_35_samba.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2004-498.html
cve@mitre.org	http://www.securityfocus.com/archive/1/377618
cve@mitre.org	http://www.securityfocus.com/bid/11281	Patch, Vendor Advisory
cve@mitre.org	http://www.trustix.org/errata/2004/0051/
cve@mitre.org	https://bugzilla.fedora.us/show_bug.cgi?id=2102
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/17556
af854a3a-2127-422b-91ae-364da2661108	http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=109655827913457&w=2
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1
af854a3a-2127-422b-91ae-364da2661108	http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1
af854a3a-2127-422b-91ae-364da2661108	http://us4.samba.org/samba/news/#security_2.2.12
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2004/dsa-600	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true	Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2004_35_samba.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2004-498.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/377618
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/11281	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.trustix.org/errata/2004/0051/
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.fedora.us/show_bug.cgi?id=2102
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/17556

Impacted products

Vendor	Product	Version
samba	samba	2.2.0
samba	samba	2.2.0a
samba	samba	2.2.1a
samba	samba	2.2.2
samba	samba	2.2.3
samba	samba	2.2.3a
samba	samba	2.2.4
samba	samba	2.2.5
samba	samba	2.2.6
samba	samba	2.2.7
samba	samba	2.2.7a
samba	samba	2.2.8
samba	samba	2.2.8a
samba	samba	2.2.9
samba	samba	2.2.11
samba	samba	2.2a
samba	samba	3.0.0
samba	samba	3.0.1
samba	samba	3.0.2
samba	samba	3.0.2a

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "65AC9643-E1A5-4013-9607-17C6CC7CC63B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "090E2541-2DBA-41CB-A792-9E703C797949",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "19F65FF3-71F8-4278-A823-A6E0FF65D9F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C71CB60-2689-4A4A-9509-E2F3135E6491",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0129E404-3AE8-4F0E-89CB-7F2FA5B47011",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "614547F5-9C3F-489B-9B72-91B0FF646CCC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A052141C-874D-4ED0-99FB-D7468FACFC6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "9739EA65-9FA8-425E-B355-E690773D5B1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B618F94-DAC2-4A97-9F7F-8BCEA3199769",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEE7C057-B024-4417-B572-5D396366620E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*",
              "matchCriteriaId": "34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFCD334C-FB95-41A6-8F4C-FCC4E70CE930",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*",
              "matchCriteriaId": "75C86202-3150-440C-B048-BB039E9D3606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F84FB25B-5EA5-48DC-B528-E8CCF714C919",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "216145B7-4716-42F7-90DC-03884ECB2271",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "898968E5-577E-4B86-A804-EBEC67157A61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "920EF846-41D1-429D-AF0F-3D7950F93069",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."
    },
    {
      "lang": "es",
      "value": "La funci\u00f3n unix_clena_name en Samba 2.2.x a 2.2.11, y 3.0.x anterirores a 3.0.2a, recorta ciertos nombres de directorio a sus rutas absolutas, lo que podr\u00eda permitir a atacantes evitar la restricticiones de espeficadas de lectura, ejecuci\u00f3n y listado de carpetas compartidas mediante secuencias del estilo \"/.////\" en rutas."
    }
  ],
  "id": "CVE-2004-0815",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-11-03T05:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://us4.samba.org/samba/news/#security_2.2.12"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2004/dsa-600"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/377618"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/11281"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.trustix.org/errata/2004/0051/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://us4.samba.org/samba/news/#security_2.2.12"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.debian.org/security/2004/dsa-600"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/377618"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/11281"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.trustix.org/errata/2004/0051/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-FMC4-F425-JJCV

Vulnerability from github – Published: 2022-04-29 02:58 – Updated: 2025-04-03 04:01

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2004-0815"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2004-11-03T05:00:00Z",
    "severity": "HIGH"
  },
  "details": "The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames.",
  "id": "GHSA-fmc4-f425-jjcv",
  "modified": "2025-04-03T04:01:46Z",
  "published": "2022-04-29T02:58:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0815"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.fedora.us/show_bug.cgi?id=2102"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17556"
    },
    {
      "type": "WEB",
      "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000873"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=109655827913457\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1"
    },
    {
      "type": "WEB",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1"
    },
    {
      "type": "WEB",
      "url": "http://us4.samba.org/samba/news/#security_2.2.12"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2004/dsa-600"
    },
    {
      "type": "WEB",
      "url": "http://www.idefense.com/application/poi/display?id=146\u0026type=vulnerabilities\u0026flashstatus=true"
    },
    {
      "type": "WEB",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2004_35_samba.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2004-498.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/377618"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/11281"
    },
    {
      "type": "WEB",
      "url": "http://www.trustix.org/errata/2004/0051"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2004-0815 (GCVE-0-2004-0815)

GSD-2004-0815

RHSA-2004:498

RHSA-2004_498

FKIE_CVE-2004-0815

GHSA-FMC4-F425-JJCV

Tags

Sightings

Nomenclature