Fix for CVE-2009-2813.
authorKarolin Seeger <kseeger@samba.org>
Mon, 28 Sep 2009 18:36:29 +0000 (20:36 +0200)
committerKarolin Seeger <kseeger@samba.org>
Thu, 1 Oct 2009 12:25:01 +0000 (14:25 +0200)
commitc7078ea2479e9963f7758e82bda247f48de2d4be
tree8bb8cece4f8ce34aa6e6792f8223fabb00483010
parenta9cdec42bf587aad5bdd22a196a8f37c68270b23
Fix for CVE-2009-2813.

===========================================================
== Subject:     Misconfigured /etc/passwd file may share folders unexpectedly
==
== CVE ID#:     CVE-2009-2813
==
== Versions:    All versions of Samba later than 3.0.11
==
== Summary:     If a user in /etc/passwd is misconfigured to have
==              an empty home directory then connecting to the home
==              share of this user will use the root of the filesystem
==              as the home directory.
===========================================================
(cherry picked from commit c1a4a99f8cc5803682a94060efee1adf330c4f02)
source/param/loadparm.c
source/smbd/service.c