Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.samba.org/samba/news/#security_2.2.12
http://www.vuxml.org/freebsd/de16b056-132e-11d9-bc4a-000c41e2cdad.html
Insight
The following packages are affected:
samba
ja-samba
CVE-2004-0815
The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via '/.////' style sequences in pathnames.
Severity
Classification
-
CVE CVE-2004-0815 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities