CVE-2001-0406

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using...

2.1 LowPublic exploit

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Exploit likelihood

1.14%Down 2.1 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Record: CVE-2001-0406
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Record: CVE-2001-0406
Updated: 2026-11-02

EUVDEUVD-2001-0403 No score

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Record: EUVD-2001-0403
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cqfr-4gw6-468j No score

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using...

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Record: GHSA-cqfr-4gw6-468j
Updated: 2026-11-02

Affected products

samba

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Samba 2.0.x - Insecure TMP File Symbolic Link	2001-04-17

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0406 is a low vulnerability (CVSS 2.1) in Samba, published May 24, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. No source names a fixed version.

References

Show 6 moreShow less