Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2004-0186
cve-2004-0186
samba
linux
setuid
root privileges
nvd
6.3 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Affected configurations
Node
sambasambaMatch2.0
ORsambasambaMatch3.0.0
Node
linuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6_test9_cvs
| CPE | Name | Operator | Version |
|---|---|---|---|
| samba:samba | samba | eq | 2.0 |
| samba:samba | samba | eq | 3.0.0 |
Related
nessus
nessus
Mandrake Linux Security Advisory : samba (MDKSA-2004:035)
2004-07-31 00:00:00
Debian DSA-463-1 : samba - privilege escalation
2004-09-29 00:00:00
Samba smbmnt Local Privilege Escalation
2011-11-18 00:00:00
debian
debian
[SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt
2004-03-13 02:27:34
nvd
nvd
CVE-2004-0186
2004-03-15 05:00:00
openvas
openvas
Debian Security Advisory DSA 463-1 (samba)
2008-01-17 00:00:00
Debian Security Advisory DSA 463-1 (samba)
2008-01-17 00:00:00
osv
osv
samba - privilege escalation
2004-03-12 00:00:00
debiancve
debiancve
CVE-2004-0186
2004-09-01 04:00:00
cvelist
cvelist
CVE-2004-0186
2004-09-01 04:00:00
6.3 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2004-0186