Fix for CVE-2009-2813.
authorJeremy Allison <jra@samba.org>
Thu, 1 Oct 2009 17:23:29 +0000 (10:23 -0700)
committerJeremy Allison <jra@samba.org>
Thu, 1 Oct 2009 17:23:29 +0000 (10:23 -0700)
commit00ce3e143f0a3dcf93b0d6745c4df6c7ba78a32d
treed2efc11a2fa9a3eb48ea1f7778593c717928f0b2
parent75f90772ce14cfbb8256ac7e897741e38b758e34
Fix for CVE-2009-2813.

===========================================================
== Subject:     Misconfigured /etc/passwd file may share folders unexpectedly
==
== CVE ID#:     CVE-2009-2813
==
== Versions:    All versions of Samba later than 3.0.11
==
== Summary:     If a user in /etc/passwd is misconfigured to have
==              an empty home directory then connecting to the home
==              share of this user will use the root of the filesystem
==              as the home directory.
===========================================================
source3/param/loadparm.c
source3/smbd/service.c