CVE-2021-31800: Path Traversal
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket before 0.9.23. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
Other sources
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31800?
CVE-2021-31800 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2021-31800?
To mitigate CVE-2021-31800, upgrade Impacket to version 0.9.23 or later.
What software is affected by CVE-2021-31800?
CVE-2021-31800 affects Impacket versions prior to 0.9.23 as well as Fedora versions 32, 33, and 34.
Can CVE-2021-31800 allow remote attacks?
Yes, CVE-2021-31800 can allow remote attackers to access and manipulate files on the server.
What specific component is vulnerable in CVE-2021-31800?
The vulnerability exists in the smbserver.py component of Impacket.