CVE-2009-2813
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used...
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
Exploit likelihood
What each source reports
NVD Score used
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
CVE-2009-2813- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
CVE-2009-2813- Updated
- 2026-11-02
EUVDEUVD-2009-2803 No score
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
EUVD-2009-2803- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2hg7-9ph2-q8p9 No score
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used...
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
GHSA-2hg7-9ph2-q8p9- Updated
- 2026-11-02
OSV No score
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
CVE-2009-2813- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2813 No score
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.
- Record
DEBIAN-CVE-2009-2813- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10334-1 No score
cifs-utils-6.5-1.5 on GA media
These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10334-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.4.2-1 | 2:3.4.2-1 |
sambaDebian:13 |
before 2:3.4.2-1 | 2:3.4.2-1 |
sambaDebian:14 |
before 2:3.4.2-1 | 2:3.4.2-1 |
sambaDebian:5.0 |
before 2:3.2.5-4lenny7, plus listed versions 2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny6 |
2:3.2.5-4lenny7 |
sambaRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-clientRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-clientRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-commonRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-swatRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
sambaRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-clientRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-commonRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-swatRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
libsmbclientRed Hat:rhel_extras:5::client |
before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libsmbclient-develRed Hat:rhel_extras:5::client |
before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libtallocRed Hat:rhel_extras:5::client |
before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtalloc-develRed Hat:rhel_extras:5::client |
before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtdbRed Hat:rhel_extras:5::client |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libtdb-develRed Hat:rhel_extras:5::client |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
samba3xRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-clientRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-commonRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-debuginfoRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-docRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-domainjoin-guiRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-swatRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbindRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbind-develRed Hat:rhel_extras:5::client |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
tdb-toolsRed Hat:rhel_extras:5::client |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libsmbclientRed Hat:rhel_extras:5::server |
before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libsmbclient-develRed Hat:rhel_extras:5::server |
before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libtallocRed Hat:rhel_extras:5::server |
before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtalloc-develRed Hat:rhel_extras:5::server |
before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtdbRed Hat:rhel_extras:5::server |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libtdb-develRed Hat:rhel_extras:5::server |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
samba3xRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-clientRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-commonRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-debuginfoRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-docRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-domainjoin-guiRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-swatRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbindRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbind-develRed Hat:rhel_extras:5::server |
before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
tdb-toolsRed Hat:rhel_extras:5::server |
before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
cifs-utilsopenSUSE:Tumbleweed |
before 6.5-1.5 | 6.5-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2813 is a medium vulnerability (CVSS 6.0) in Apple Mac Os X, published September 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in samba 2:3.4.2-1.
References
marc.info?l=bugtraq&m=126514298313071&w=2
news.samba.org/releases/3.4.2
securityfocus.com/archive/1/507856/100/0/threaded
redhat.com/archives/fedora-package-announce/2009-October/msg00098.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9191
Show 109 moreShow less
lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
sunsolve.sun.com/search/document.do?assetkey=1-77-1021111.1-1
vupen.com/english/advisories/2009/2810
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.561439
secunia.com/advisories/37428
ubuntu.com/usn/USN-839-1
samba.org/samba/security/CVE-2009-2813.html
support.apple.com/kb/HT3865
wiki.rpath.com/Advisories:rPSA-2009-0145
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
exchange.xforce.ibmcloud.com/vulnerabilities/53174
osvdb.org/57955
nvd.nist.gov/vuln/detail/CVE-2009-2813
github.com/advisories/GHSA-2hg7-9ph2-q8p9
security-tracker.debian.org/tracker/CVE-2009-2813
access.redhat.com/errata/RHSA-2009:1529
bugzilla.redhat.com/show_bug.cgi?id=526645
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1529.json
cve.org/CVERecord?id=CVE-2009-1888
samba.org/samba/history
suse.com/security/cve/CVE-2009-1886