client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade libsmbclient-develUpgrade sambaUpgrade libsmbclientUpgrade samba-swatUpgrade samba-common | Dec 1, 2016 | Mar 2, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 2, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Mar 2, 2010 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade libsmbclientUpgrade samba-commonUpgrade samba-clientUpgrade libsmbclient-devel | Oct 16, 2024 | Mar 2, 2010 |
| Samba | — | Upgrade to Samba version 3.0.23Upgrade to Samba version 3.0.29Upgrade to Samba version 3.4.6Upgrade to Samba version 3.4.1Upgrade to Samba version 3.3.3Upgrade to Samba version 3.2.4 | Apr 30, 2018 | Mar 2, 2010 |
| Suse | — | Upgrade samba-client-x86Upgrade libsamba-hostconfig-develUpgrade python3-ldbUpgrade libwbclient0Upgrade libtevent0-x86Upgrade libsmbldap0-32bitUpgrade samba-test-develUpgrade libndr-standard0Upgrade libtalloc2Upgrade libsamba-util0-32bitUpgrade libsmbsharemodes-develUpgrade libdcerpc-binding0-32bitUpgrade libgensec-develUpgrade libtalloc-develUpgrade libtalloc1Upgrade libndr-standard0-32bitUpgrade samba-32bitUpgrade libsamba-policy0Upgrade libregistry-develUpgrade samba-winbind-libs-langUpgrade libsamba-hostconfig0Upgrade libsamba-errors0-32bitUpgrade samba-kdcUpgrade libtalloc1-x86Upgrade libwbclient-develUpgrade samba-ad-dcUpgrade libsmbconf-develUpgrade libsamba-credentials-develUpgrade pam_cifscredsUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb0-32bitUpgrade libnetapi0Upgrade samba-libs-python3Upgrade cifs-mountUpgrade libndr-develUpgrade samba-libs-python3-32bitUpgrade samba-winbind-32bitUpgrade sambaUpgrade samba-x86Upgrade libsmbldap2-32bitUpgrade libgensec0Upgrade libpdb0Upgrade libsmbsharemodes0Upgrade libnetapi-develUpgrade libsamdb0Upgrade samba-winbind-libsUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade samba-client-langUpgrade samba-dcerpcUpgrade libwbclient0-32bitUpgrade libndr0-32bitUpgrade libsmbclient-raw0-32bitUpgrade libndr-nbt0Upgrade ctdbUpgrade libsmbldap-develUpgrade libdcerpc-samr-develUpgrade cifs-utilsUpgrade libndr-krb5pac-develUpgrade libwbclient0-x86Upgrade samba-pythonUpgrade libtalloc2-32bitUpgrade libdcerpc-atsvc-develUpgrade libsamba-util0Upgrade libdcerpc-develUpgrade samba-gpupdateUpgrade libtdb-develUpgrade samba-toolUpgrade libdcerpc0-32bitUpgrade libsmbclient0Upgrade ctdb-pcp-pmdaUpgrade samba-winbindUpgrade libndr-nbt0-32bitUpgrade samba-docUpgrade libtdb1-32bitUpgrade libndr-krb5pac0Upgrade libtalloc2-x86Upgrade libsmbclient0-32bitUpgrade libsamba-errors0Upgrade libdcerpc-atsvc0Upgrade libldb-develUpgrade libtevent-util0-32bitUpgrade libtdb1Upgrade samba-ad-dc-libsUpgrade libtalloc1-32bitUpgrade libsmbldap0Upgrade libndr-nbt-develUpgrade ldapsmbUpgrade libnetapi0-32bitUpgrade samba-clientUpgrade libsamba-hostconfig0-32bitUpgrade libsamba-policy-develUpgrade libsamba-errors-develUpgrade libtevent-util0Upgrade libsmbclient-raw0Upgrade libpdb-develUpgrade libsmbldap2Upgrade samba-krb-printingUpgrade libdcerpc-binding0Upgrade samba-core-develUpgrade libndr-krb5pac0-32bitUpgrade samba-testUpgrade libldb1Upgrade libsamba-passdb-develUpgrade libndr0Upgrade libsmbconf0Upgrade libtevent-develUpgrade samba-client-libs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbfs | Nov 8, 2024 | Mar 2, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.0 to build number 660575Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Mar 2, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub