CVE-2001-1162: HP Cifs-9000 Server

High severity, CVSS 10.0. EPSS: 12% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.

Affected products

• HP Cifs-9000 Server: version a.01.05 only; version a.01.06 only
• Samba Samba: version 2.0.5 only; version 2.0.6 only; version 2.0.7 only; version 2.0.8 only; version 2.0.9 only; version 2.2.0 only

Published 2001-06-23. Last modified 2026-06-16.