CVE-2001-1162

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jun 23, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-116310.0Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.CVE-2001-11647.2Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2CVE-2001-11654.6Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decryptingCVE-2001-11665.0linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on aCVE-2001-11685.0Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (moCVE-2001-11697.5keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileCVE-2001-11705.0AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal aCVE-2001-11717.2Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, wCVE-2001-11724.6OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that fileCVE-2001-11737.2Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.CVE-2001-11747.5Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.CVE-2001-11757.2vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users
CVE-2001-1162: Critical severity, CVSS 10.0 | Vulnix