CVE-2010-0787 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.4 UNKNOWN	LOCAL	MEDIUM		AV:L/AC:M/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 41.16%

Affected Products (NVD)

Vendor	Product	Version
samba	samba	3.0.22
samba	samba	3.0.28a:a
samba	samba	3.2.3
samba	samba	3.4.0
samba	samba	3.4.5

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

samba

bookworm	2:4.17.12+dfsg-0+deb12u1 fixed
bookworm (security)	2:4.17.12+dfsg-0+deb12u1 fixed
bullseye	2:4.13.13+dfsg-1~deb11u6 fixed
bullseye (security)	2:4.13.13+dfsg-1~deb11u6 fixed
sid	2:4.21.1+dfsg-2 fixed
trixie	2:4.21.1+dfsg-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

samba

dapper	Fixed 3.0.22-1ubuntu3.10 released
hardy	Fixed 3.0.28a-1ubuntu4.10 released
intrepid	Fixed 2:3.2.3-1ubuntu3.7 released
jaunty	Fixed 2:3.3.2-1ubuntu3.3 released
karmic	Fixed 2:3.4.0-3ubuntu5.4 released

openSUSE / SLES Releases

openSUSE Product

Release

cifs-utils

suse enterprise desktop 15	6.5-1.43 fixed
suse enterprise sap 15	6.5-1.43 fixed
suse enterprise server 12	6.4-3.5 fixed
suse enterprise server 12 SP1	6.4-6.4 fixed
suse enterprise server 12 SP2	6.5-8.9 fixed
suse enterprise server 12 SP3	6.5-8.9 fixed
suse enterprise server 12 SP4	6.5-9.3.2 fixed
suse enterprise server 12 SP5	6.9-9.6.1 fixed
suse enterprise server 15	6.5-1.43 fixed

cifs-utils-devel

suse enterprise desktop 15	6.5-1.43 fixed
suse enterprise sap 15	6.5-1.43 fixed
suse enterprise server 15	6.5-1.43 fixed

libdcerpc-atsvc0

suse enterprise server 12 SP2

4.2.4-26.2

fixed

libdcerpc-binding0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libdcerpc-binding0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libdcerpc0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libdcerpc0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libgensec0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

libgensec0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

libndr-krb5pac0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr-krb5pac0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr-nbt0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr-nbt0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr-standard0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr-standard0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libndr0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libnetapi0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libnetapi0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libpdb0

suse enterprise server 12

4.1.12-3.2

fixed

libpdb0-32bit

suse enterprise server 12

4.1.12-3.2

fixed

libregistry0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

libsamba-credentials0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-credentials0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-errors0

suse enterprise server 12 SP2

4.4.2-29.4

fixed

libsamba-errors0-32bit

suse enterprise server 12 SP2

4.4.2-29.4

fixed

libsamba-hostconfig0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-hostconfig0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-passdb0

suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-passdb0-32bit

suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-util0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamba-util0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamdb0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsamdb0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbclient-raw0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

libsmbclient-raw0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

libsmbclient0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbclient0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbconf0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbconf0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbldap0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libsmbldap0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libtevent-util0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libtevent-util0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libwbclient0

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

libwbclient0-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed

samba-client

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-client-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-doc

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-libs

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-libs-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-winbind

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

samba-winbind-32bit

suse enterprise server 12	4.1.12-3.2 fixed
suse enterprise server 12 SP1	4.2.4-4.19 fixed
suse enterprise server 12 SP2	4.4.2-29.4 fixed

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80

http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034444.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034470.html

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

http://secunia.com/advisories/38286

http://secunia.com/advisories/38308

http://secunia.com/advisories/38357

http://security.gentoo.org/glsa/glsa-201206-29.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2010:090

http://www.securityfocus.com/bid/37992

http://www.securityfocus.com/bid/39898

http://www.ubuntu.com/usn/USN-893-1

http://www.vupen.com/english/advisories/2010/1062

https://bugzilla.redhat.com/show_bug.cgi?id=532940

https://bugzilla.redhat.com/show_bug.cgi?id=558833

https://bugzilla.samba.org/show_bug.cgi?id=6853

https://exchange.xforce.ibmcloud.com/vulnerabilities/55944

http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80

http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034444.html

http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034470.html

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

http://secunia.com/advisories/38286

http://secunia.com/advisories/38308

http://secunia.com/advisories/38357

http://security.gentoo.org/glsa/glsa-201206-29.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2010:090

http://www.securityfocus.com/bid/37992

http://www.securityfocus.com/bid/39898

http://www.ubuntu.com/usn/USN-893-1

http://www.vupen.com/english/advisories/2010/1062

https://bugzilla.redhat.com/show_bug.cgi?id=532940

https://bugzilla.redhat.com/show_bug.cgi?id=558833

https://bugzilla.samba.org/show_bug.cgi?id=6853

https://exchange.xforce.ibmcloud.com/vulnerabilities/55944