Executive Summary

Informations
Name MDVSA-2009:042 First vendor Publication 2009-02-18
Vendor Mandriva Last vendor Modification 2009-02-18
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:C/I:N/A:N)
Cvss Base Score 6.3 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Medium
Cvss Expoit Score 6.8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name (CVE-2009-0022).

This update provides samba 3.2.7 to address this issue.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2009:042

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-20 Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13986
 
Oval ID: oval:org.mitre.oval:def:13986
Title: USN-702-1 -- samba vulnerability
Description: Gunter Höckel discovered that Samba with registry shares enabled did not properly validate share names. An authenticated user could gain access to the root filesystem by using an older version of smbclient and specifying an empty string as a share name. This is only an issue if registry shares are enabled on the server by setting "registry shares = yes", "include = registry", or "config backend = registry", which is not the default.
Family: unix Class: patch
Reference(s): USN-702-1
CVE-2009-0022
 Version: 5
Platform(s): Ubuntu 8.10
 Product(s): samba
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 7

OpenVAS Exploits

Date Description
2009-10-06 Name : Fedora Core 10 FEDORA-2009-10172 (samba)
File : nvt/fcore_2009_10172.nasl
2009-06-05 Name : Ubuntu USN-698-3 (nagios2)
File : nvt/ubuntu_698_3.nasl
2009-02-23 Name : Mandrake Security Advisory MDVSA-2009:042 (samba)
File : nvt/mdksa_2009_042.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.1)
File : nvt/suse_sr_2009_001.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 11.0)
File : nvt/suse_sr_2009_001a.nasl
2009-01-20 Name : SuSE Security Summary SUSE-SR:2009:001 (OpenSuSE 10.3)
File : nvt/suse_sr_2009_001b.nasl
2009-01-13 Name : Fedora Core 9 FEDORA-2009-0268 (samba)
File : nvt/fcore_2009_0268.nasl
2009-01-09 Name : Samba Root File System Access Security Vulnerability
File : nvt/gb_samba_root_file_sys_sec_vuln.nasl
2009-01-07 Name : Fedora Core 10 FEDORA-2009-0160 (samba)
File : nvt/fcore_2009_0160.nasl
2009-01-07 Name : Ubuntu USN-702-1 (samba)
File : nvt/ubuntu_702_1.nasl
0000-00-00 Name : Slackware Advisory SSA:2009-005-01 samba
File : nvt/esoft_slk_ssa_2009_005_01.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
51152 Samba Crafted Connection Request Remote Root File System Access

Snort® IPS/IDS

Date Description
2014-01-10 Samba Root File System access bypass attempt
RuleID : 17639 - Revision : 9 - Type : SERVER-SAMBA

Nessus® Vulnerability Scanner

Date Description
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_0_cifs-mount-090108.nasl - Type : ACT_GATHER_INFO
2009-07-21 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_cifs-mount-090108.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Fedora host is missing a security update.
File : fedora_2009-0160.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2009-042.nasl - Type : ACT_GATHER_INFO
2009-04-23 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-702-1.nasl - Type : ACT_GATHER_INFO
2009-01-16 Name : The remote Fedora host is missing a security update.
File : fedora_2009-0268.nasl - Type : ACT_GATHER_INFO
2009-01-06 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2009-005-01.nasl - Type : ACT_GATHER_INFO
2009-01-06 Name : The remote Samba server may be affected by an unauthorized access vulnerability.
File : samba_3_2_7.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:39:59
  • Multiple Updates