vulnwire
2.1low

CVE-2001-04061 exploit

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more c…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 67%
Public exploits
1
Exploit-DB

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Exploit prediction (EPSS)

1.14% probability of exploitation in the next 30 days, higher than 67% of all scored CVEs.

Exploits and detections

  • EDB-20776 Samba 2.0.x - Insecure TMP File Symbolic Link · local · 2001-04-17

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

References

  • archives.neohapsis.com /archives/bugtraq/2001-04/0319.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2001-04/0326.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000395 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • caldera.com /support/security/advisories/CSSA-2001-015.0.txt · vendor-advisory, x_refsource_CALDERA, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2001-04/0305.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • kb.cert.org /vuls/id/670568 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /bid/2617 · vdb-entry, x_refsource_BID, x_transferred
  • linux-mandrake.com /en/security/2001/MDKSA-2001-040.php3 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • debian.org /security/2001/dsa-048 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • archives.neohapsis.com /archives/freebsd/2001-04/0608.html · vendor-advisory, x_refsource_FREEBSD, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.