{"api_version":"1","generated_at":"2026-07-23T09:59:45+00:00","cve":"CVE-2009-2813","urls":{"html":"https://cve.report/CVE-2009-2813","api":"https://cve.report/api/cve/CVE-2009-2813.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-2813","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-2813"},"summary":{"title":"CVE-2009-2813","description":"Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-09-14 16:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6","severity":"","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","name":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2009:017","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://news.samba.org/releases/3.4.2/","name":"http://news.samba.org/releases/3.4.2/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Samba 3.4.2 Security Release Available","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2009/2810","name":"http://www.vupen.com/english/advisories/2009/2810","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","name":"http://www.securityfocus.com/archive/1/507856/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","name":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 11 Update: samba-3.4.2-0.42.fc11","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","name":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/36363","name":"http://www.securityfocus.com/bid/36363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Samba Misconfigured '/etc/passwd' File Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","name":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"The Slackware Linux Project: Slackware Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-839-1","name":"http://www.ubuntu.com/usn/USN-839-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-839-1: Samba vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36893","name":"http://secunia.com/advisories/36893","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Samba Information Disclosure and Denial of Service - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/37428","name":"http://secunia.com/advisories/37428","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Sun Solaris Samba Information Disclosure and Denial of Service - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/57955","name":"http://osvdb.org/57955","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/36701","name":"http://secunia.com/advisories/36701","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Apple Mac OS X Security Update Fixes Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36953","name":"http://secunia.com/advisories/36953","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA36953 - Fedora update for samba - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36937","name":"http://secunia.com/advisories/36937","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA36937 - Slackware update for samba - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36918","name":"http://secunia.com/advisories/36918","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for samba - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","name":"http://marc.info/?l=bugtraq&m=126514298313071&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[security bulletin] HPSBUX02479 SSRT090212 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Unau' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://news.samba.org/releases/3.3.8/","name":"http://news.samba.org/releases/3.3.8/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Samba 3.3.8 Security Release Available","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","name":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 10 Update: samba-3.2.15-0.36.fc10","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://news.samba.org/releases/3.0.37/","name":"http://news.samba.org/releases/3.0.37/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Samba 3.0.37 Security Release Available","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT3865","name":"http://support.apple.com/kb/HT3865","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Security Update 2009-005","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://news.samba.org/releases/3.2.15/","name":"http://news.samba.org/releases/3.2.15/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Samba 3.2.15 Security Release Available","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","name":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2009-09-10-2 Security Update 2009-005","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.samba.org/samba/security/CVE-2009-2813.html","name":"http://www.samba.org/samba/security/CVE-2009-2813.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Samba - Security Announcement Archive","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2813","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2813","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x_server","cpe6":"10.5.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.14a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.20a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.20b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.21a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.21b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.21c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.23a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.23b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.23c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.23d","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"pre1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"pre2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.25c","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.26a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.27a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.28a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.0.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.3.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2813","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"samba","cpe5":"samba","cpe6":"3.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:07:36.127Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"SSRT090212","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://news.samba.org/releases/3.4.2/"},{"name":"20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded"},{"name":"FEDORA-2009-10172","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html"},{"name":"oval:org.mitre.oval:def:9191","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191"},{"name":"HPSBUX02479","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://news.samba.org/releases/3.2.15/"},{"name":"APPLE-SA-2009-09-10-2","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"},{"name":"1021111","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1"},{"name":"ADV-2009-2810","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/2810"},{"name":"SSA:2009-276-01","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439"},{"name":"37428","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37428"},{"name":"36937","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36937"},{"name":"USN-839-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-839-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://news.samba.org/releases/3.0.37/"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.samba.org/samba/security/CVE-2009-2813.html"},{"name":"oval:org.mitre.oval:def:7257","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT3865"},{"name":"36363","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/36363"},{"name":"36918","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36918"},{"name":"36701","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36701"},{"name":"36893","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36893"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://news.samba.org/releases/3.3.8/"},{"name":"36953","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36953"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145"},{"name":"oval:org.mitre.oval:def:7211","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211"},{"name":"SUSE-SR:2009:017","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"},{"name":"macosx-smb-security-bypass(53174)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174"},{"name":"oval:org.mitre.oval:def:7791","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791"},{"name":"57955","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/57955"},{"name":"FEDORA-2009-10180","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-09-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-10T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"SSRT090212","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://news.samba.org/releases/3.4.2/"},{"name":"20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded"},{"name":"FEDORA-2009-10172","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html"},{"name":"oval:org.mitre.oval:def:9191","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191"},{"name":"HPSBUX02479","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"tags":["x_refsource_CONFIRM"],"url":"http://news.samba.org/releases/3.2.15/"},{"name":"APPLE-SA-2009-09-10-2","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"},{"name":"1021111","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1"},{"name":"ADV-2009-2810","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/2810"},{"name":"SSA:2009-276-01","tags":["vendor-advisory","x_refsource_SLACKWARE"],"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439"},{"name":"37428","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37428"},{"name":"36937","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36937"},{"name":"USN-839-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-839-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://news.samba.org/releases/3.0.37/"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.samba.org/samba/security/CVE-2009-2813.html"},{"name":"oval:org.mitre.oval:def:7257","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT3865"},{"name":"36363","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/36363"},{"name":"36918","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36918"},{"name":"36701","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36701"},{"name":"36893","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36893"},{"tags":["x_refsource_CONFIRM"],"url":"http://news.samba.org/releases/3.3.8/"},{"name":"36953","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36953"},{"tags":["x_refsource_CONFIRM"],"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145"},{"name":"oval:org.mitre.oval:def:7211","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211"},{"name":"SUSE-SR:2009:017","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"},{"name":"macosx-smb-security-bypass(53174)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174"},{"name":"oval:org.mitre.oval:def:7791","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791"},{"name":"57955","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/57955"},{"name":"FEDORA-2009-10180","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-2813","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"SSRT090212","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"name":"http://news.samba.org/releases/3.4.2/","refsource":"CONFIRM","url":"http://news.samba.org/releases/3.4.2/"},{"name":"20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/507856/100/0/threaded"},{"name":"FEDORA-2009-10172","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html"},{"name":"oval:org.mitre.oval:def:9191","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191"},{"name":"HPSBUX02479","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126514298313071&w=2"},{"name":"http://news.samba.org/releases/3.2.15/","refsource":"CONFIRM","url":"http://news.samba.org/releases/3.2.15/"},{"name":"APPLE-SA-2009-09-10-2","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"},{"name":"1021111","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1"},{"name":"ADV-2009-2810","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/2810"},{"name":"SSA:2009-276-01","refsource":"SLACKWARE","url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439"},{"name":"37428","refsource":"SECUNIA","url":"http://secunia.com/advisories/37428"},{"name":"36937","refsource":"SECUNIA","url":"http://secunia.com/advisories/36937"},{"name":"USN-839-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-839-1"},{"name":"http://news.samba.org/releases/3.0.37/","refsource":"CONFIRM","url":"http://news.samba.org/releases/3.0.37/"},{"name":"http://www.samba.org/samba/security/CVE-2009-2813.html","refsource":"CONFIRM","url":"http://www.samba.org/samba/security/CVE-2009-2813.html"},{"name":"oval:org.mitre.oval:def:7257","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7257"},{"name":"http://support.apple.com/kb/HT3865","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT3865"},{"name":"36363","refsource":"BID","url":"http://www.securityfocus.com/bid/36363"},{"name":"36918","refsource":"SECUNIA","url":"http://secunia.com/advisories/36918"},{"name":"36701","refsource":"SECUNIA","url":"http://secunia.com/advisories/36701"},{"name":"36893","refsource":"SECUNIA","url":"http://secunia.com/advisories/36893"},{"name":"http://news.samba.org/releases/3.3.8/","refsource":"CONFIRM","url":"http://news.samba.org/releases/3.3.8/"},{"name":"36953","refsource":"SECUNIA","url":"http://secunia.com/advisories/36953"},{"name":"http://wiki.rpath.com/Advisories:rPSA-2009-0145","refsource":"CONFIRM","url":"http://wiki.rpath.com/Advisories:rPSA-2009-0145"},{"name":"oval:org.mitre.oval:def:7211","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7211"},{"name":"SUSE-SR:2009:017","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"},{"name":"macosx-smb-security-bypass(53174)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53174"},{"name":"oval:org.mitre.oval:def:7791","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7791"},{"name":"57955","refsource":"OSVDB","url":"http://osvdb.org/57955"},{"name":"FEDORA-2009-10180","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-2813","datePublished":"2009-09-14T16:00:00.000Z","dateReserved":"2009-08-17T00:00:00.000Z","dateUpdated":"2024-08-07T06:07:36.127Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-09-14 16:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","baseScore":6,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"50E05AD3-C7F0-421D-8C9B-604E553332E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3A53517C-F12D-4D74-A722-5AE23598CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"2BF4A0A7-E176-4009-BAA2-E23B330D91A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*","matchCriteriaId":"42EB6115-CC45-4464-8400-D7E3A9402803"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"58B06DAF-869F-481B-965D-70353581A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBF1A1D4-39DE-4227-A6E0-7E7817BDCCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"84F0E277-09BD-4FA8-B2A3-7E83AD1656BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"9F260B05-3963-49BF-9D96-EB06722C5483"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"59A7E91B-7B13-47E5-B8E6-CE7D6DC490F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"F002F105-A911-4E56-8630-C287DC527E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*","matchCriteriaId":"D1936E19-9887-4E53-AA0C-738ABD4B97EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*","matchCriteriaId":"A2206C09-6A4B-4EC4-A206-E48EDF966913"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"0B918306-8743-404D-A035-CC3997ADCC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*","matchCriteriaId":"43684906-D3AA-40FB-A75D-ED65C1DC9BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*","matchCriteriaId":"62E39538-4811-49DB-97CF-1F018C58BAE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*","matchCriteriaId":"C85D69FE-AF43-4B0E-A7A9-2D2C16426180"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"86347948-C08F-4F02-89A0-4F4A55CD4BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"A908DA9D-A8BD-46BA-A71F-BFDEC0A1341E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*","matchCriteriaId":"7CA7905C-51A0-4A56-A6A5-330288613055"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*","matchCriteriaId":"4AE85033-0658-4D60-8C7A-6E2BD63AFDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*","matchCriteriaId":"4600AAA4-834D-4F63-8E9A-88CB555C029E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*","matchCriteriaId":"54FE8D2E-AF0D-4C84-A5BC-2CE6759B534C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"8BFA3B82-9440-49E1-8088-FA22C0B7DD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"0762B1DA-7232-478D-805F-5E2A50F8BEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*","matchCriteriaId":"9F22FC74-5999-4158-A253-674BF1C21E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*","matchCriteriaId":"0EEB31C4-5352-4905-8D9E-BD754991F07E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*","matchCriteriaId":"B0BE2AEC-6ACD-422C-AD20-6C034D68C891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*","matchCriteriaId":"101163D7-D440-43CC-8704-A9614CD8CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*","matchCriteriaId":"F0E4811D-3387-4838-94A0-1BD7F3C9C3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:*","matchCriteriaId":"B69EA9CF-627C-4600-B4EC-10E91DB07E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:*","matchCriteriaId":"0AF740A1-0BEC-4E29-9C74-F1F906EF3EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:*","matchCriteriaId":"99A8D6D8-A207-498F-8DB2-EB7ED842CE1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"70BB5BA1-F499-40FC-80F6-B3CD2F1BB074"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:*","matchCriteriaId":"9A973443-C497-41FB-AF47-529AA2906CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"4BEE83D0-8377-49FB-AC7D-3B5E9DB6918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.27a:*:*:*:*:*:*:*","matchCriteriaId":"DDC24403-E706-4073-A04D-53E1B79B59B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"42F2EB0A-249D-4E81-B459-A88AC60A1D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.28a:*:*:*:*:*:*:*","matchCriteriaId":"8B3AA114-63C8-4B25-86BA-73C6933EE21F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"EBEA8397-6E23-49FE-9555-39C9599C6362"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"023C2353-750A-42FC-AC7E-115627E74AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"F28A8721-CA4A-44E1-B740-0B4610374CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"D93572BB-7F00-4137-A079-6FE96CD73F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"0F0B13E8-EF18-4A3D-B228-C7FF128D1FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"9B843321-9A8D-4541-9E54-58E2978E2437"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"FBF36A20-3607-43A8-A4CC-169922BC0327"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:*","matchCriteriaId":"EB71265E-60C4-4495-8B66-360E96B76FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FE530BB9-A3ED-4EBB-B8E5-86D4CC5A8C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"44746973-3CFD-4808-9545-755E296EFF6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"31E4627C-5D19-4599-B304-D0E4D4193170"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EEE162A7-969D-44D5-B9ED-764F20F19C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"28DF45AE-DF03-4321-A019-D3BBC16433B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"64D87AD2-89F2-455F-916E-D404E6BD02C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6218AB51-DE71-40F3-8CBC-AF33586D36EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D02F8427-0DCC-48A9-A04F-939571D511E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"FC8A9943-6949-4B0A-9864-8B4696704098"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4970BB40-085C-4069-B6F1-7E3726F1CFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"FA43C063-EBE1-4C61-9C9E-C84C3A594A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6962B6DA-5D78-4702-9546-216971D03F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"39FAD067-8547-41E7-B1BC-74CC55D58AA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"787C3CBF-5E4E-4727-950A-D99F15327CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3:*:*:*:*:*:*:*","matchCriteriaId":"6D9E86C9-14FE-4C55-A08F-9A0C555260ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D4B0684-FDCC-4EE8-AABA-F71204167C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7172A430-F124-4200-88C2-8BE486BA5DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"D0EB9DC7-A196-48ED-893B-733E8CDA961F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"27D03508-3D54-4D05-A5BC-6F8641B45C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F235FA61-ECBB-45C8-A48D-FAF12A5E2EC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1B0E09D3-68FA-40C9-A478-53707E5F78BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"66D41850-968D-431D-8075-EE9EFF013408"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"873A4A35-2CB0-4D55-B455-19D892776293"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4:*:*:*:*:*:*:*","matchCriteriaId":"DDCD3046-85BB-40A6-A898-774833033891"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E2B3A-10C4-4226-A224-8D4AC792B2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"EFFCF854-E316-442F-A62F-ACC1CA4E9892"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"2813","Ordinal":"1","Title":"CVE-2009-2813","CVE":"CVE-2009-2813","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"2813","Ordinal":"1","NoteData":"Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.","Type":"Description","Title":"CVE-2009-2813"},{"CveYear":"2009","CveId":"2813","Ordinal":"2","NoteData":"2009-09-14","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"2813","Ordinal":"3","NoteData":"2018-10-10","Type":"Other","Title":"Modified"}]}}}