CVE-2009-2948

2009-10-0700:00:00

ubuntu.com

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

26.5%

JSON

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8
and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not
properly enforce permissions, which allows local users to read part of the
credentials file and obtain the password by specifying the path to the
credentials file and using the --verbose or -v option.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsamba< 3.0.22-1ubuntu3.9UNKNOWN
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.9UNKNOWN
ubuntu8.10noarchsamba< 2:3.2.3-1ubuntu3.6UNKNOWN
ubuntu9.04noarchsamba< 2:3.3.2-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	samba	< 3.0.22-1ubuntu3.9	UNKNOWN
ubuntu	8.04	noarch	samba	< 3.0.28a-1ubuntu4.9	UNKNOWN
ubuntu	8.10	noarch	samba	< 2:3.2.3-1ubuntu3.6	UNKNOWN
ubuntu	9.04	noarch	samba	< 2:3.3.2-1ubuntu3.2	UNKNOWN