CVE-2004-0815 Path traversal in n/a

High 7.5 Published 16 Oct 2004 Updated 8 Aug 2024

Remote attackers can bypass share restrictions to read, write, or list arbitrary files via path traversal sequences in Samba.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2004-0815?

CVE-2004-0815 is a high-severity path traversal vulnerability in Samba Samba, published on 16 Oct 2004. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

Which versions are affected by CVE-2004-0815?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2004-0815?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2004-0815 being exploited?

There is no known exploitation of CVE-2004-0815 in the wild and no public exploit code.

All Samba Samba vulnerabilities

Sources

Also known as CVE-2004-0910, DEBIAN-CVE-2004-0815, DSA-600-1, GHSA-fmc4-f425-jjcv.