client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-swatUpgrade samba-commonUpgrade libsmbclientUpgrade libsmbclient-develUpgrade sambaUpgrade samba-client | Dec 1, 2016 | Mar 2, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 2, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Mar 2, 2010 |
| Oracle_linux | — | Upgrade samba-clientUpgrade libsmbclient-develUpgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-swat | Oct 16, 2024 | Mar 2, 2010 |
| Samba | — | Upgrade to Samba version 3.2.4Upgrade to Samba version 3.4.1Upgrade to Samba version 3.0.29Upgrade to Samba version 3.0.23Upgrade to Samba version 3.4.6Upgrade to Samba version 3.3.3 | Apr 30, 2018 | Mar 2, 2010 |
| Suse | — | Upgrade libsmbconf0Upgrade samba-libsUpgrade libtevent-develUpgrade libldb1Upgrade samba-32bitUpgrade libsamdb0-32bitUpgrade libsamba-policy0Upgrade libregistry0Upgrade libsmbclient-develUpgrade samba-winbind-libs-langUpgrade libtevent0-x86Upgrade samba-test-develUpgrade libsmbsharemodes-develUpgrade libsamba-hostconfig0Upgrade libsmbldap-develUpgrade libgensec0-32bitUpgrade samba-client-libsUpgrade libtevent0Upgrade samba-kdcUpgrade libsamba-errors0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util-develUpgrade samba-winbind-x86Upgrade samba-libs-32bitUpgrade libndr-develUpgrade libdcerpc-binding0Upgrade libnetapi0-32bitUpgrade libnetapi0Upgrade ldapsmbUpgrade libsamba-errors-develUpgrade libsmbclient0Upgrade libsamba-policy-develUpgrade libnetapi-develUpgrade samba-x86Upgrade libtevent-util0-32bitUpgrade libtalloc2-32bitUpgrade libsamdb0Upgrade libpdb0Upgrade libtalloc1-32bitUpgrade samba-ldb-ldapUpgrade libsamba-hostconfig0-32bitUpgrade libndr0-32bitUpgrade libsmbconf-develUpgrade samba-ad-dc-libsUpgrade libdcerpc-atsvc0Upgrade libgensec0Upgrade libtdb1Upgrade libsmbclient0-32bitUpgrade samba-docUpgrade libtalloc2-x86Upgrade libwbclient-develUpgrade libwbclient0-32bitUpgrade samba-client-langUpgrade samba-python3Upgrade libtalloc1-x86Upgrade python3-ldbUpgrade libdcerpc-samr-develUpgrade libtevent-util0Upgrade libsmbclient-raw0-32bitUpgrade libsmbsharemodes0Upgrade cifs-utilsUpgrade libndr-nbt0Upgrade samba-toolUpgrade libsamba-util0Upgrade samba-pythonUpgrade samba-ad-dcUpgrade libndr-krb5pac0Upgrade libndr-krb5pac-develUpgrade libldb-develUpgrade libsamba-errors0Upgrade samba-winbindUpgrade libndr-nbt0-32bitUpgrade ctdb-pcp-pmdaUpgrade libtdb-develUpgrade libsamba-credentials0-32bitUpgrade samba-clientUpgrade libsmbldap2Upgrade libsmbclient-raw0Upgrade libdcerpc-atsvc-develUpgrade samba-libs-python3-32bitUpgrade pam_cifscredsUpgrade libsamba-passdb0-32bitUpgrade samba-core-develUpgrade samba-krb-printingUpgrade samba-dcerpcUpgrade samba-libs-python3Upgrade cifs-mountUpgrade samba-winbind-32bitUpgrade libsmbldap2-32bitUpgrade libpdb-develUpgrade samba-winbind-libsUpgrade libsamba-credentials-develUpgrade samba-gpupdateUpgrade libdcerpc0-32bitUpgrade libtdb1-32bitUpgrade libndr-nbt-develUpgrade libwbclient0-x86Upgrade libsmbldap0Upgrade libdcerpc-develUpgrade sambaUpgrade libwbclient0Upgrade ctdbUpgrade libsmbldap0-32bitUpgrade libregistry-develUpgrade libsamdb-develUpgrade libgensec-develUpgrade libtalloc2Upgrade libldb2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade smbfs | Nov 8, 2024 | Mar 2, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575 | Feb 3, 2012 | Mar 2, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub