Executive Summary

Informations
Name CVE-2009-0022 First vendor Publication 2009-01-05
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:C/I:N/A:N)
Cvss Base Score 6.3 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Medium
Cvss Expoit Score 6.8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0022

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-20 Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13986
 
Oval ID: oval:org.mitre.oval:def:13986
Title: USN-702-1 -- samba vulnerability
Description: Gunter Höckel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares are enabled on the server by setting "registry shares = yes", "include = registry", or "config backend = registry", which is not the default.
Family: unix Class: patch
Reference(s): USN-702-1
CVE-2009-0022
 Version: 5
Platform(s): Ubuntu 8.10
 Product(s): samba
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 7

OpenVAS Exploits

Date Description
2009-10-06 Name : Fedora Core 10 FEDORA-2009-10172 (samba)
File : nvt/fcore_2009_10172.nasl
2009-06-05 Name : Ubuntu USN-698-3 (nagios2)
File : nvt/ubuntu_698_3.nasl
2009-02-23 Name : Mandrake Security Advisory MDVSA-2009:042 (samba)
File : nvt/mdksa_2009_042.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.1)
File : nvt/suse_sr_2009_001.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.0)
File : nvt/suse_sr_2009_001a.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)
File : nvt/suse_sr_2009_001b.nasl
2009-01-13 Name : Fedora Core 9 FEDORA-2009-0268 (samba)
File : nvt/fcore_2009_0268.nasl
2009-01-09 Name : Samba Root File System Access Security Vulnerability
File : nvt/gb_samba_root_file_sys_sec_vuln.nasl
2009-01-07 Name : Fedora Core 10 FEDORA-2009-0160 (samba)
File : nvt/fcore_2009_0160.nasl
2009-01-07 Name : Ubuntu USN-702-1 (samba)
File : nvt/ubuntu_702_1.nasl
0000-00-00 Name : Slackware Advisory SSA:2009-005-01 samba
File : nvt/esoft_slk_ssa_2009_005_01.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
51152 Samba Crafted Connection Request Remote Root File System Access

Snort® IPS/IDS

Date Description
2014-01-10 Samba Root File System access bypass attempt
RuleID : 17639 - Revision : 9 - Type : SERVER-SAMBA

Nessus® Vulnerability Scanner

Date Description
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_0_cifs-mount-090108.nasl - Type : ACT_GATHER_INFO
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_cifs-mount-090108.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Fedora host is missing a security update.
File : fedora_2009-0160.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2009-042.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-702-1.nasl - Type : ACT_GATHER_INFO
2009-01-16 Name : The remote Fedora host is missing a security update.
File : fedora_2009-0268.nasl - Type : ACT_GATHER_INFO
2009-01-06 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2009-005-01.nasl - Type : ACT_GATHER_INFO
2009-01-06 Name : The remote Samba server may be affected by an unauthorized access vulnerability.
File : samba_3_2_7.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://master.samba.org/samba/ftp/patches/security/samba-3.2.6-CVE-2009-0022....
http://osvdb.org/51152
http://secunia.com/advisories/33379
http://secunia.com/advisories/33392
http://secunia.com/advisories/33431
http://www.mandriva.com/security/advisories?name=MDVSA-2009:042
http://www.samba.org/samba/security/CVE-2009-0022.html
http://www.securityfocus.com/bid/33118
http://www.securitytracker.com/id?1021513
http://www.vupen.com/english/advisories/2009/0017
https://exchange.xforce.ibmcloud.com/vulnerabilities/47733
https://usn.ubuntu.com/702-1/
https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00309...
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
Date Informations
2024-11-28 23:12:33
  • Multiple Updates
2024-11-28 12:18:01
  • Multiple Updates
2021-05-04 12:08:57
  • Multiple Updates
2021-04-22 01:09:17
  • Multiple Updates
2020-05-23 00:23:10
  • Multiple Updates
2018-10-04 00:19:34
  • Multiple Updates
2017-08-08 09:24:38
  • Multiple Updates
2016-06-28 17:32:57
  • Multiple Updates
2016-04-26 18:32:27
  • Multiple Updates
2014-02-17 10:48:10
  • Multiple Updates
2014-01-19 21:25:31
  • Multiple Updates
2013-05-10 23:41:21
  • Multiple Updates