Lucene search
HistoryMar 15, 2004 - 5:00 a.m.
CVE-2004-0186
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.2%
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Affected configurations
Node
sambasambaMatch2.0
ORsambasambaMatch3.0.0
Node
linuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test10
ORlinuxlinux_kernelMatch2.6.0test11
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6_test9_cvs
Related
debian
debian
[SECURITY] [DSA 463-1] New samba packages fix privilege escalation in smbmnt
2004-03-13 02:27:34
nessus
nessus
Mandrake Linux Security Advisory : samba (MDKSA-2004:035)
2004-07-31 00:00:00
Debian DSA-463-1 : samba - privilege escalation
2004-09-29 00:00:00
Samba smbmnt Local Privilege Escalation
2011-11-18 00:00:00
openvas
openvas
Debian Security Advisory DSA 463-1 (samba)
2008-01-17 00:00:00
Debian Security Advisory DSA 463-1 (samba)
2008-01-17 00:00:00
osv
osv
samba - privilege escalation
2004-03-12 00:00:00
debiancve
debiancve
CVE-2004-0186
2004-09-01 04:00:00
cve
cve
CVE-2004-0186
2004-09-01 04:00:00
cvelist
cvelist
CVE-2004-0186
2004-09-01 04:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.2%
Related for NVD:CVE-2004-0186