Fix for CVE-2009-2813.
commita1e08163c3a90e5e6b16474cb81180a51dfa1b60
authorJeremy Allison <jra@samba.org>
Mon, 28 Sep 2009 11:26:37 +0000 (28 13:26 +0200)
committerKarolin Seeger <kseeger@samba.org>
Thu, 1 Oct 2009 12:28:02 +0000 (1 14:28 +0200)
tree208e73d1e82ccca5c0d94d9661d150457b1128c1
parentfbfc121ea1da5dd0156734226410fa07fdf51fad
Fix for CVE-2009-2813.

===========================================================
== Subject:     Misconfigured /etc/passwd file may share folders unexpectedly
==
== CVE ID#:     CVE-2009-2813
==
== Versions:    All versions of Samba later than 3.0.11
==
== Summary:     If a user in /etc/passwd is misconfigured to have
==              an empty home directory then connecting to the home
==              share of this user will use the root of the filesystem
==              as the home directory.
===========================================================
(cherry picked from commit ac075bd679fd59e93ea13780f6651a431002edd0)
source3/param/loadparm.c
source3/smbd/service.c