CVE-2010-0787

2010-03-0200:00:00

ubuntu.com

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.9%

JSON

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3,
3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an
arbitrary mountpoint, and gain privileges, via a symlink attack on the
mountpoint directory file.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsamba< 3.0.22-1ubuntu3.10UNKNOWN
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.10UNKNOWN
ubuntu8.10noarchsamba< 2:3.2.3-1ubuntu3.7UNKNOWN
ubuntu9.04noarchsamba< 2:3.3.2-1ubuntu3.3UNKNOWN
ubuntu9.10noarchsamba< 2:3.4.0-3ubuntu5.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	samba	< 3.0.22-1ubuntu3.10	UNKNOWN
ubuntu	8.04	noarch	samba	< 3.0.28a-1ubuntu4.10	UNKNOWN
ubuntu	8.10	noarch	samba	< 2:3.2.3-1ubuntu3.7	UNKNOWN
ubuntu	9.04	noarch	samba	< 2:3.3.2-1ubuntu3.3	UNKNOWN
ubuntu	9.10	noarch	samba	< 2:3.4.0-3ubuntu5.4	UNKNOWN