Description
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:3.4.2-1 | — |
| Debian 13 | samba | 2:3.4.2-1 | — |
| Debian 12 | samba | 2:3.4.2-1 | — |
| Debian 5.0 | samba | 2:3.2.5-4lenny7 | DSA-1908-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | libsmbclient +1 | 3.0.34-46.el5 | RHSA-2009:1585 |
| RHEL 5 | libtalloc +1 | 1.2.0-46.el5 | RHSA-2009:1585 |
| RHEL 5 | libtdb +2 | 1.1.2-46.el5 | RHSA-2009:1585 |
| RHEL 5 | samba +3 | 3.0.33-3.15.el5_4 | RHSA-2009:1529 |
| RHEL 5 | samba3x +7 | 3.3.8-0.46.el5 | RHSA-2009:1585 |
| RHEL 4 | samba +3 | 3.0.33-0.18.el4_8 | RHSA-2009:1529 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cifs-utils | 6.5-1.5 | openSUSE-SU-2024:10334-1 |
| openSUSE Tumbleweed | samba | 4.5.0-1.1 | openSUSE-SU-2024:10069-1 |
Advisories 5
- RHSA-2009:1585 Red Hat Security Advisory: samba3x security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1529 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-1908-1 samba - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10069-1 ctdb-4.5.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10334-1 cifs-utils-6.5-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- SSRT090212 vendor-advisory
- http://news.samba.org/releases/3.4.2/
- 20091112 rPSA-2009-0145-1 samba samba-client samba-server samba-swat mailing-list
- FEDORA-2009-10172 vendor-advisory
- oval:org.mitre.oval:def:9191 vdb-entry signature
- http://news.samba.org/releases/3.2.15/
- APPLE-SA-2009-09-10-2 vendor-advisory
- 1021111 vendor-advisory
- ADV-2009-2810 vdb-entry
- SSA:2009-276-01 vendor-advisory
- 37428 third-party-advisory
- 36937 third-party-advisory
- USN-839-1 vendor-advisory
- http://news.samba.org/releases/3.0.37/
- http://www.samba.org/samba/security/CVE-2009-2813.html
- oval:org.mitre.oval:def:7257 vdb-entry signature
- http://support.apple.com/kb/HT3865
- 36363 vdb-entry
- 36918 third-party-advisory
- 36701 third-party-advisory
- 36893 third-party-advisory
- http://news.samba.org/releases/3.3.8/
- 36953 third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2009-0145
- oval:org.mitre.oval:def:7211 vdb-entry signature
- SUSE-SR:2009:017 vendor-advisory
- macosx-smb-security-bypass(53174) vdb-entry
- oval:org.mitre.oval:def:7791 vdb-entry signature
- 57955 vdb-entry
- FEDORA-2009-10180 vendor-advisory