Unscored severity · published Mar 10, 2010
CVE-2010-0926
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to…
–
CVSS
30.4%
EPSS
No
On KEV
Description
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
Exploitation
Is it being used?
Exploit prediction (EPSS)30.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
3.3.0; 3.3.1; 3.3.2; 3.3.3; 3.3.4; 3.3.5; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0926
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0926
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0083.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0107.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0108.html
blog.metasploit.com
http://blog.metasploit.com/2010/02/exploiting-samba-symlink-traversal.html
gitweb.samba.org
http://gitweb.samba.org/?p=samba.git%3Ba=commit%3Bh=bd269443e311d96ef495a9db47d1b95eb83bb8f4
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
Samba: smbd allows client access to unix domain sockets on the file system as root
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…