Vulnerability in Apple Mac Os X
CVE-2009-2813
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.5.8
- Apple Mac_os_x_server — versions 10.5.8
- Samba — versions 3.0.12, 3.0.13, 3.0.14
- Fedoraproject Fedora — versions 11
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SLACKWARE)
Frequently asked questions
- What is CVE-2009-2813?
- CVE-2009-2813 is a vulnerability in Apple Mac Os X, classified under CWE-264. Published 2009-09-14.
- Is CVE-2009-2813 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.