CVE-2009-2948

2009-10-0700:00:00

ubuntu.com

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

39.1%

JSON

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8
and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not
properly enforce permissions, which allows local users to read part of the
credentials file and obtain the password by specifying the path to the
credentials file and using the --verbose or -v option.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsamba< 3.0.22-1ubuntu3.9UNKNOWN
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.9UNKNOWN
ubuntu8.10noarchsamba< 2:3.2.3-1ubuntu3.6UNKNOWN
ubuntu9.04noarchsamba< 2:3.3.2-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	samba	< 3.0.22-1ubuntu3.9	UNKNOWN
ubuntu	8.04	noarch	samba	< 3.0.28a-1ubuntu4.9	UNKNOWN
ubuntu	8.10	noarch	samba	< 2:3.2.3-1ubuntu3.6	UNKNOWN
ubuntu	9.04	noarch	samba	< 2:3.3.2-1ubuntu3.2	UNKNOWN