CVE-2001-1162

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
32.2%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: June 23, 2001 (9091 days ago)
Last Modified: April 16, 2026
Vendor: HPE
Source: NVD

Description

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.

CWE

NVD-CWE-Other

Affected Products

samba sambahp cifs-9000 server

References

🔗 patches.sgi.com 🔗 ciac.llnl.gov 🔗 distro.conectiva.com.br 🔗 download.immunix.org 🔗 us1.samba.org