Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

smb2www: arbitrary command execution

Package(s):

smb2www

CVE #(s):

Created:

December 5, 2002

Updated:

December 11, 2002

Description:

Robert Luberda found a security problem in smb2www, a Windows Network client that is accessible through a web browser. This could lead a remote attacker to execute arbitrary programs under the user id www-data on the host where smb2www is running.

Alerts:

Debian

DSA-203-1

2002-12-04

(Log in to post comments)