CVE-2001-0406

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395
http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txtPatch, Vendor Advisory
http://www.debian.org/security/2001/dsa-048Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/670568US Government Resource
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3
http://www.securityfocus.com/bid/2617
http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395
http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txtPatch, Vendor Advisory
http://www.debian.org/security/2001/dsa-048Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/670568US Government Resource
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3
http://www.securityfocus.com/bid/2617

Timeline

Published: Jul 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04074.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a dat CVE-2001-04085.1vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when anoth CVE-2001-04092.1vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi CVE-2001-04107.5Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c CVE-2001-04115.0Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant CVE-2001-04127.2Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode CVE-2001-04135.0BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau CVE-2001-041410.0Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib CVE-2001-04154.6REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce CVE-2001-04162.1sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar CVE-2001-04172.1Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.CVE-2001-04185.0content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting S