CVE:CVE-2001-1162
CNNVD:CNNVD-200106-117
Samba 2.2.0a之前版本的smb.conf配置文件的%m macro存在目录遍历漏洞。远程攻击者可以借助用于.log文件名称的NETBIOS中的..覆盖某些文件。
solution:Upgrade samba samba to a higher version than 2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.2.0,and avoid the version 2.0.5,2.0.6,2.0.7,2.0.8,2.0.9,2.2.0; Upgrade hp cifs-9000_server to a higher version than a.01.05,a.01.06,and avoid the version a.01.05,a.01.06