client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade samba-clientUpgrade sambaUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-swatUpgrade samba-common | Dec 1, 2016 | Mar 2, 2010 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 2, 2010 |
| Gentoo Linux | — | Upgrade net-fs/mount-cifs. | Oct 30, 2017 | Mar 2, 2010 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade libsmbclientUpgrade samba-clientUpgrade samba-commonUpgrade libsmbclient-devel | Oct 16, 2024 | Mar 2, 2010 |
| Samba | — | Upgrade to Samba version 3.3.3Upgrade to Samba version 3.0.29Upgrade to Samba version 3.2.4Upgrade to Samba version 3.0.23Upgrade to Samba version 3.4.6Upgrade to Samba version 3.4.1 | Apr 30, 2018 | Mar 2, 2010 |
| Suse | — | Upgrade libwbclient0-64bitUpgrade samba-winbind-64bitUpgrade samba-32bitUpgrade libtalloc-develUpgrade samba-develUpgrade samba-client-32bitUpgrade libmsrpcUpgrade samba-client-x86Upgrade samba-client-64bitUpgrade libtdb1-64bitUpgrade libsmbclient-develUpgrade libwbclient0Upgrade libsmbsharemodes-develUpgrade libtalloc1-64bitUpgrade libtalloc1Upgrade samba-winbind-x86Upgrade libsmbclient-x86Upgrade samba-vscanUpgrade libsmbclient-64bitUpgrade libmsrpc-develUpgrade libsmbsharemodes0Upgrade libsmbclientUpgrade samba-winbindUpgrade libwbclient-develUpgrade samba-x86Upgrade ldapsmbUpgrade libnetapi-develUpgrade libsmbsharemodesUpgrade libtdb1Upgrade libsmbclient0-32bitUpgrade libwbclient0-32bitUpgrade libsmbclient0-64bitUpgrade samba-pythonUpgrade samba-clientUpgrade samba-krb-printingUpgrade samba-64bitUpgrade libnetapi0Upgrade libtdb-develUpgrade sambaUpgrade libtdb1-32bitUpgrade cifs-mountUpgrade sap-aio-releaseUpgrade samba-winbind-32bitUpgrade samba-docUpgrade libsmbclient0Upgrade libsmbclient-32bitUpgrade libtalloc1-32bit | Feb 17, 2015 | Mar 2, 2010 |
| Ubuntu | — | Upgrade smbfs | Nov 8, 2024 | Mar 2, 2010 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.0 to build number 660575Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Mar 2, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub