Samba vulnerability

2010-01-2800:00:00

ubuntu.com

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

59.8%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

samba -

Details

Ronald Volgers discovered that the mount.cifs utility, when installed as a
setuid program, suffered from a race condition when verifying user
permissions. A local attacker could trick samba into mounting over
arbitrary locations, leading to a root privilege escalation.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchsmbfs< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchlibpam-smbpass< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchlibsmbclient< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchlibsmbclient-dev< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchlibwbclient0< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchsamba< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchsamba-common-bin< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchsamba-dbg< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchsamba-tools< 2:3.4.0-3ubuntu5.4UNKNOWN
Ubuntu9.10noarchsmbclient< 2:3.4.0-3ubuntu5.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	smbfs	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	libpam-smbpass	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	libsmbclient	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	libsmbclient-dev	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	libwbclient0	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	samba	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	samba-common-bin	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	samba-dbg	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	samba-tools	< 2:3.4.0-3ubuntu5.4	UNKNOWN
Ubuntu	9.10	noarch	smbclient	< 2:3.4.0-3ubuntu5.4	UNKNOWN