CVE-2001-0406 - Vulnerability Details - OpenCVE

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00301.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Linux
Samba	Samba

Configuration 1 [-]

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Linux 5.2
	cpe:/o:redhat:linux:5.2	RHSA-2001:044	2001-05-15T00:00:00Z
Red Hat Linux 6.2
	cpe:/o:redhat:linux:6.2	RHSA-2001:044	2001-05-15T00:00:00Z
Red Hat Linux 7.0
	cpe:/o:redhat:linux:7.0	RHSA-2001:044	2001-05-15T00:00:00Z
Red Hat Linux 7.1
	cpe:/o:redhat:linux:7.1	RHSA-2001:044	2001-05-15T00:00:00Z

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html
http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html
http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html
http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395
http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt
http://www.debian.org/security/2001/dsa-048
http://www.kb.cert.org/vuls/id/670568
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3
http://www.securityfocus.com/bid/2617
https://nvd.nist.gov/vuln/detail/CVE-2001-0406
https://www.cve.org/CVERecord?id=CVE-2001-0406

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2001-05-24T04:00:00

Updated: 2024-08-08T04:21:38.580Z

Reserved: 2001-05-24T00:00:00

Link: CVE-2001-0406

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2001-07-02T04:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2001-0406

Redhat

Severity :

Publid Date: 2001-04-17T00:00:00Z

Links: CVE-2001-0406 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2001-04-17T00:00:00", "descriptions": [{"lang": "en", "value": "Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2005-05-09T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20010418 TSLSA-#2001-0005 - samba", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html"}, {"name": "20010418 PROGENY-SA-2001-05: Samba /tmp vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html"}, {"name": "CLA-2001:395", "tags": ["vendor-advisory", "x_refsource_CONECTIVA"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395"}, {"name": "CSSA-2001-015.0", "tags": ["vendor-advisory", "x_refsource_CALDERA"], "url": "http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt"}, {"name": "20010417 Samba 2.0.8 security fix", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html"}, {"name": "VU#670568", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/670568"}, {"name": "2617", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/2617"}, {"name": "MDKSA-2001:040", "tags": ["vendor-advisory", "x_refsource_MANDRAKE"], "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3"}, {"name": "DSA-048", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2001/dsa-048"}, {"name": "FreeBSD-SA-01:36", "tags": ["vendor-advisory", "x_refsource_FREEBSD"], "url": "http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2001-0406", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20010418 TSLSA-#2001-0005 - samba", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html"}, {"name": "20010418 PROGENY-SA-2001-05: Samba /tmp vulnerabilities", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html"}, {"name": "CLA-2001:395", "refsource": "CONECTIVA", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395"}, {"name": "CSSA-2001-015.0", "refsource": "CALDERA", "url": "http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt"}, {"name": "20010417 Samba 2.0.8 security fix", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html"}, {"name": "VU#670568", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/670568"}, {"name": "2617", "refsource": "BID", "url": "http://www.securityfocus.com/bid/2617"}, {"name": "MDKSA-2001:040", "refsource": "MANDRAKE", "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3"}, {"name": "DSA-048", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2001/dsa-048"}, {"name": "FreeBSD-SA-01:36", "refsource": "FREEBSD", "url": "http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T04:21:38.580Z"}, "title": "CVE Program Container", "references": [{"name": "20010418 TSLSA-#2001-0005 - samba", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html"}, {"name": "20010418 PROGENY-SA-2001-05: Samba /tmp vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html"}, {"name": "CLA-2001:395", "tags": ["vendor-advisory", "x_refsource_CONECTIVA", "x_transferred"], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395"}, {"name": "CSSA-2001-015.0", "tags": ["vendor-advisory", "x_refsource_CALDERA", "x_transferred"], "url": "http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt"}, {"name": "20010417 Samba 2.0.8 security fix", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html"}, {"name": "VU#670568", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/670568"}, {"name": "2617", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/2617"}, {"name": "MDKSA-2001:040", "tags": ["vendor-advisory", "x_refsource_MANDRAKE", "x_transferred"], "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3"}, {"name": "DSA-048", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2001/dsa-048"}, {"name": "FreeBSD-SA-01:36", "tags": ["vendor-advisory", "x_refsource_FREEBSD", "x_transferred"], "url": "http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2001-0406", "datePublished": "2001-05-24T04:00:00", "dateReserved": "2001-05-24T00:00:00", "dateUpdated": "2024-08-08T04:21:38.580Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*", "matchCriteriaId": "433B7E7E-FD46-4544-A742-F27F697962FC", "versionEndIncluding": "2.0.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient."}], "id": "CVE-2001-0406", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2001-07-02T04:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html"}, {"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html"}, {"source": "cve@mitre.org", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2001/dsa-048"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/670568"}, {"source": "cve@mitre.org", "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/2617"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.debian.org/security/2001/dsa-048"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/670568"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/2617"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}