ArchLinux: 202107-56: impacket: directory traversal
Summary
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket before version 0.9.23. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
Resolution
Upgrade to 0.9.23-1.
# pacman -Syu "impacket>=0.9.23-1"
The problem has been fixed upstream in version 0.9.23.
References
https://bugs.archlinux.org/task/70714 https://github.com/fortra/impacket/pull/1066 https://github.com/fortra/impacket/commit/99bd29e3995c254e2d6f6c2e3454e4271665955a https://security.archlinux.org/CVE-2021-31800
![Dist Arch](/images/distros/dist-arch.png)
Workaround
None.