Improper input validation in Samba

CVE-2009-0022

Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root filesystem via a crafted connection request that specifies a blank share name.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.035 (88.1th percentile) — read the EPSS interpretation.

Affected products

  • Samba — versions 3.2.0, 3.2.1, 3.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References