Upstream information
Description
The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)
Novell/SUSE information
Novell Bugzilla entry: 577868, 597421 SUSE Security Advisories:- SUSE-SR:2010:007, published Tue, 30 Mar 2010 10:00:00 +0000
- SUSE-SR:2010:008, published Wed, 07 Apr 2010 13:00:00 +0000
- SUSE-SR:2010:014, published Mon, 02 Aug 2010 15:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| SUSE Studio Onsite |
| studioonsite1.0.x86-64 SAT Patch Nr: 2357 |
| openSUSE 11.0 |
| |
| openSUSE 11.0 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| SUSE Linux Enterprise 11 Moblin 2.0 |
| SAT Patch Nr: 2545 |
| SUSE Linux Enterprise 11 Moblin 2.0 |
| SAT Patch Nr: 2545 |
| SUSE Linux Enterprise Server for SAP 10 SP2 |
| sled10-sp2.x86-64 sle10-sp2-sdk.x86-64 sle10-sp2-sdk.s390x sles10-sp2.s390x sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sle10-sp2-sdk.ppc sles10-sp2.ppc sles10-sp2.x86 ZYPP Patch Nr: 6920 |
| SUSE Linux Enterprise SDK 10 SP2 |
| sled10-sp2.x86-64 sle10-sp2-sdk.x86-64 sle10-sp2-sdk.s390x sles10-sp2.s390x sle10-sp2-sdk.ia64 sle10-sp2-sdk.x86 sles10-sp2.ia64 sled10-sp2.x86 sles10-sp2.x86-64 sle10-sp2-sdk.ppc sles10-sp2.ppc sles10-sp2.x86 ZYPP Patch Nr: 6920 |
| SUSE Linux Enterprise 11 Moblin 2.1 DEBUGINFO |
| SAT Patch Nr: 2546 |
| SUSE Linux Enterprise 11 Moblin 2.1 |
| SAT Patch Nr: 2546 |
| Open Enterprise Server |
| core9.x86 sles9-oes.x86 sles9-nlpos.x86 core9.s390x core9.ia64 core9.s390 core9.x86-64 core9.ppc YOU Patch Nr: 12595 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise SDK 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Desktop 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Desktop 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Server 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Server 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Server 11 GA |
| sle11-debuginfo.s390x sle11-sdk.ppc sles11.x86 sles11.ia64 sle11-debuginfo.x86 sle11-debuginfo.x86-64 sle11-debuginfo.ia64 sles11.ppc sle11-sdk.ia64 sled11.x86 sle11-sdk.s390x sle11-debuginfo.ppc sled11.x86-64 sle11-sdk.x86-64 sles11.s390x sle11-sdk.x86 sles11.x86-64 SAT Patch Nr: 2126 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
| SUSE Linux Enterprise Server 10 SP3 |
| sled10-sp3.x86 sle10-sp3-sdk.x86 sles10-sp3.ppc sles10-sp3.ia64 sles10-sp3.x86-64 sles10-sp3.s390x sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.x86-64 sle10-sp3-sdk.ia64 sle10-sp3-sdk.ppc sle10-sp3-sdk.s390x ZYPP Patch Nr: 6921 |
