• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Samba Remote Arbitrary File Creation Vulnerability

Bugtraq ID:	2928
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 23 2001 12:00AM
Updated:	Jun 23 2001 12:00AM
Credit:	This vulnerability was announced to BugTraq by Michal Zalewski <lcamtuf@bos.bindview.com> on June 23, 2001.
Vulnerable:	Samba Samba 2.2 .0 - S.u.S.E. Linux 7.2 Samba Samba 2.0.9 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X Server 10.0 - Apple Mac OS X Server 10.0 - Caldera OpenLinux Server 3.1 - Caldera OpenLinux Workstation 3.1 - Caldera OpenLinux Workstation 3.1 + Conectiva Linux 6.0 + Conectiva Linux 6.0 - Debian Linux 2.2 - Debian Linux 2.2 - RedHat Linux 7.1 - RedHat Linux 7.1 - RedHat Linux 7.0 - RedHat Linux 7.0 - RedHat Linux 6.2 - RedHat Linux 6.2 - S.u.S.E. Linux 7.1 sparc - S.u.S.E. Linux 7.1 sparc - S.u.S.E. Linux 7.1 ppc - S.u.S.E. Linux 7.1 ppc - S.u.S.E. Linux 7.1 alpha - S.u.S.E. Linux 7.1 alpha - S.u.S.E. Linux 7.1 - S.u.S.E. Linux 7.1 - S.u.S.E. Linux 7.0 sparc - S.u.S.E. Linux 7.0 sparc - S.u.S.E. Linux 7.0 ppc - S.u.S.E. Linux 7.0 ppc - S.u.S.E. Linux 7.0 alpha - S.u.S.E. Linux 7.0 alpha - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 ppc - S.u.S.E. Linux 6.4 ppc - S.u.S.E. Linux 6.4 alpha - S.u.S.E. Linux 6.4 alpha - S.u.S.E. Linux 6.4 - S.u.S.E. Linux 6.4 - S.u.S.E. Linux 6.3 alpha - S.u.S.E. Linux 6.3 alpha - S.u.S.E. Linux 6.3 - S.u.S.E. Linux 6.3 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8 - Sun Solaris 8 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Trustix Secure Linux 1.2 - Trustix Secure Linux 1.2 - Trustix Secure Linux 1.1 - Trustix Secure Linux 1.1 - Wirex Immunix OS 7.0 -Beta - Wirex Immunix OS 7.0 -Beta - Wirex Immunix OS 7.0 - Wirex Immunix OS 7.0 - Wirex Immunix OS 6.2 - Wirex Immunix OS 6.2 Samba Samba 2.0.8 - Caldera OpenLinux 2.4 - Caldera OpenLinux 2.4 - Conectiva Linux 6.0 - Conectiva Linux 6.0 - Conectiva Linux 5.1 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.1 - Conectiva Linux 4.0 es - Conectiva Linux 4.0 es - Conectiva Linux 4.0 - Conectiva Linux 4.0 - Conectiva Linux graficas - Conectiva Linux graficas - Conectiva Linux ecommerce - Conectiva Linux ecommerce - Debian Linux 2.2 sparc - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 powerpc - Debian Linux 2.2 arm - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Debian Linux 2.2 68k - Debian Linux 2.2 - Debian Linux 2.2 - RedHat Linux 7.1 i386 - RedHat Linux 7.1 i386 - RedHat Linux 7.1 alpha - RedHat Linux 7.0 i386 - RedHat Linux 7.0 i386 - RedHat Linux 7.0 alpha - RedHat Linux 7.0 alpha - RedHat Linux 6.2 sparc - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.2 alpha - RedHat Linux 5.2 sparc - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.1 - S.u.S.E. Linux 7.1 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 - S.u.S.E. Linux 6.4 - SCO eDesktop 2.4 - SCO eDesktop 2.4 - SCO eServer 2.3.1 - SCO eServer 2.3.1 - Sun Solaris 8_x86 - Sun Solaris 8_x86 - Sun Solaris 8 - Sun Solaris 8 - Sun Solaris 7.0_x86 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 7.0 - Wirex Immunix OS 7.0 -Beta - Wirex Immunix OS 7.0 -Beta - Wirex Immunix OS 7.0 - Wirex Immunix OS 7.0 - Wirex Immunix OS 6.2 - Wirex Immunix OS 6.2 Samba Samba 2.0.7 + Caldera OpenLinux 2.3 + Caldera OpenLinux 2.3 + Conectiva Linux 6.0 + Conectiva Linux 6.0 + Conectiva Linux 5.1 + Conectiva Linux 5.1 + Conectiva Linux 5.0 + Conectiva Linux 5.0 + Conectiva Linux 4.2 + Conectiva Linux 4.2 + Conectiva Linux 4.1 + Conectiva Linux 4.1 + Conectiva Linux 4.0 es + Conectiva Linux 4.0 es + Conectiva Linux 4.0 + Conectiva Linux 4.0 + Conectiva Linux graficas + Conectiva Linux ecommerce + Conectiva Linux ecommerce + Debian Linux 2.3 sparc + Debian Linux 2.3 sparc + Debian Linux 2.3 powerpc + Debian Linux 2.3 powerpc + Debian Linux 2.3 alpha + Debian Linux 2.3 alpha + Debian Linux 2.3 + Debian Linux 2.3 + Debian Linux 2.2 sparc + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 powerpc + Debian Linux 2.2 arm + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2 68k + Debian Linux 2.2 + Debian Linux 2.2 - FreeBSD FreeBSD 5.0 - FreeBSD FreeBSD 5.0 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.2 + MandrakeSoft Linux Mandrake 7.1 + MandrakeSoft Linux Mandrake 7.1 + MandrakeSoft Linux Mandrake 7.0 + MandrakeSoft Linux Mandrake 7.0 + Progeny Debian 1.0 + Progeny Debian 1.0 + RedHat Linux 7.1 i686 + RedHat Linux 7.1 i686 + RedHat Linux 7.1 i586 + RedHat Linux 7.1 i586 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 i386 + RedHat Linux 7.1 + RedHat Linux 7.1 + RedHat Linux 7.0 i686 + RedHat Linux 7.0 i686 + RedHat Linux 7.0 i386 + RedHat Linux 7.0 i386 + RedHat Linux 7.0 + RedHat Linux 7.0 + RedHat Linux 6.2 E sparc + RedHat Linux 6.2 E i386 + RedHat Linux 6.2 E alpha + RedHat Linux 6.2 sparc + RedHat Linux 6.2 i386 + RedHat Linux 6.2 alpha + RedHat Linux 6.1 sparc + RedHat Linux 6.1 i386 + RedHat Linux 6.1 alpha + SCO eDesktop 2.4 + SCO eDesktop 2.4 + SCO eServer 2.3.1 + SCO eServer 2.3.1 + Sun Cobalt Qube3 4000WG + Sun Cobalt Qube3 4000WG + Sun Cobalt RaQ 550 4100R + Sun Cobalt RaQ 550 4100R + Sun Cobalt RaQ XTR 3500R + Sun Cobalt RaQ XTR 3500R + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 + Trustix Secure Linux 1.1 + Wirex Immunix OS 7.0 -Beta + Wirex Immunix OS 7.0 -Beta + Wirex Immunix OS 7.0 + Wirex Immunix OS 7.0 + Wirex Immunix OS 6.2 + Wirex Immunix OS 6.2 Samba Samba 2.0.6 + RedHat Linux 6.2 sparcv9 + RedHat Linux 6.2 sparcv9 + RedHat Linux 6.2 E sparc + RedHat Linux 6.2 E sparc + RedHat Linux 6.2 E i386 + RedHat Linux 6.2 E i386 + RedHat Linux 6.2 E alpha + RedHat Linux 6.2 E alpha + RedHat Linux 6.2 sparc + RedHat Linux 6.2 sparc + RedHat Linux 6.2 i386 + RedHat Linux 6.2 i386 + RedHat Linux 6.2 alpha + RedHat Linux 6.2 alpha + RedHat Linux 6.2 + RedHat Linux 6.2 + Sun Cobalt RaQ4 3001R Samba Samba 2.0.5 - Caldera OpenLinux 2.3 - Caldera OpenLinux 2.3 - SCO eServer 2.3.1 HP CIFS/9000 Server A.01.06 - HP HP-UX 11.11 - HP HP-UX 11.0 HP CIFS/9000 Server A.01.05
Not Vulnerable:	Samba Samba 2.2 .0a + S.u.S.E. Linux 7.2 i386 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.2 + Slackware Linux 8.0 + Slackware Linux 8.0 Samba Samba 2.0.10 + S.u.S.E. Linux 7.1 x86 + S.u.S.E. Linux 7.1 x86 + S.u.S.E. Linux 7.1 sparc + S.u.S.E. Linux 7.1 sparc + S.u.S.E. Linux 7.1 ppc + S.u.S.E. Linux 7.1 ppc + S.u.S.E. Linux 7.1 alpha + S.u.S.E. Linux 7.1 alpha + S.u.S.E. Linux 7.1 + S.u.S.E. Linux 7.1 + Veritas Software ServPoint NAS 3.5 + Veritas Software ServPoint NAS 1.2.2 + Veritas Software ServPoint NAS 1.2.2 + Veritas Software ServPoint NAS 1.2.1 + Veritas Software ServPoint NAS 1.2.1 + Veritas Software ServPoint NAS 1.2 + Veritas Software ServPoint NAS 1.2 + Veritas Software ServPoint NAS 1.1 + Veritas Software ServPoint NAS 1.1 + Wirex Immunix OS 7+ + Wirex Immunix OS 7+ HP CIFS/9000 Server A.01.07