GHSA-mj63-64x7-57xf

Source
https://github.com/advisories/GHSA-mj63-64x7-57xf
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-mj63-64x7-57xf/GHSA-mj63-64x7-57xf.json
Aliases
Published
2021-06-18T18:43:14Z
Modified
2024-02-22T05:28:00.511199Z
Details

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket before 0.9.23. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.

References

Affected packages

PyPI / impacket

Package

Name
impacket

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.9.23

Affected versions

0.*

0.9.10
0.9.11
0.9.12
0.9.13
0.9.14
0.9.15
0.9.17
0.9.18
0.9.19
0.9.20
0.9.21
0.9.22

Ecosystem specific 

{
    "affected_functions": [
        "impacket.smbserver.findFirst2",
        "impacket.smbserver.queryPathInformation",
        "impacket.smbserver.SMBCommands.smbComNtCreateAndX"
    ]
}