CVE-2009-2948

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly…

published October 7, 2009

CVSS
—
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00520 · 43.3th percentile
Published
2009-10-07T18:00Z
EPSS history
Timeline
  • 07 OCT 18:00Z
    mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly…
    cvelistv5