Every CVE Search/ Get API key

CVE-2010-0926

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3...

3.5 LowPublic exploitFix available

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Exploit likelihood

30.4%Down 25.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.5

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
CVE-2010-0926
CVSS 2.0
3.5 LowAV:N/AC:M/Au:S/C:P/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
CVE-2010-0926
Updated
2026-11-02
EUVDEUVD-2010-0951 No score

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
EUVD-2010-0951
Updated
2026-11-03
GitHub AdvisoriesGHSA-c6j9-4944-rfw4 No score

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3...

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
GHSA-c6j9-4944-rfw4
Weakness
CWE-22
Updated
2026-11-02
OSV No score

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
CVE-2010-0926
Updated
2026-11-02
OSVDEBIAN-CVE-2010-0926 No score

The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.

Record
DEBIAN-CVE-2010-0926
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 before 2:3.4.6~dfsg-1
2:3.4.6~dfsg-1
samba
Debian:13
 before 2:3.4.6~dfsg-1
2:3.4.6~dfsg-1
samba
Debian:14
 before 2:3.4.6~dfsg-1
2:3.4.6~dfsg-1
libsmbclient-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
libsmbclient
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-client
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-common
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
Show 10 moreShow less
Affected packages
PackageAffectedFixed
samba-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-swat
Red Hat:enterprise_linux:5::client
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
libsmbclient
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
libsmbclient-devel
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-client
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-common
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba-swat
Red Hat:enterprise_linux:5::server
 before 0:3.0.33-3.37.el5
0:3.0.33-3.37.el5
samba
openSUSE:Tumbleweed
From an advisory covering 56 CVEs
 before 4.5.0-1.1
4.5.0-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSamba 3.4.5 - Symlink Directory Traversal (Metasploit)2010-02-04
Exploit-DBSamba 3.4.5 - Symlink Directory Traversal2010-02-04
MetasploitSamba Symlink Directory Traversal

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0926 is a low vulnerability (CVSS 3.5) in Samba, published March 9, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 30.4%, the 98th percentile. Fixed in samba 2:3.4.6~dfsg-1.

References

Show 94 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open