CVE-2001-0406: Samba

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

Affected products

• Samba Samba: up to and including 2.0.7

Published 2001-07-02. Last modified 2026-06-16.