Lucene search
Veracode Vulnerability DatabaseVERACODE:10833HistoryJan 15, 2019 - 8:52 a.m.
Information Disclosure
2019-01-1508:52:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
17.9%
The cifs-utils package is vulnerable to information disclosure. The vulnerability exists due to the way it handles the second argument in mount.cifs which allows a local user to disclose the arbitrary file or directory information via an error massage.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
www.openwall.com/lists/oss-security/2012/03/27/1
www.openwall.com/lists/oss-security/2012/03/27/6
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=748756
bugzilla.redhat.com/show_bug.cgi?id=748757
bugzilla.samba.org/show_bug.cgi?id=8821
rhn.redhat.com/errata/RHSA-2012-0902.html
Related
nessus
nessus
Fedora 15 : cifs-utils-5.4-1.fc15 (2012-6398)
2012-05-01 00:00:00
Fedora 17 : cifs-utils-5.4-1.fc17 (2012-6257)
2012-05-02 00:00:00
SuSE 11.2 Security Update : cifs-utils (SAT Patch Number 6196)
2012-05-01 00:00:00
openvas
openvas
Fedora Update for cifs-utils FEDORA-2012-6398
2012-05-04 00:00:00
Mandriva Update for samba MDVSA-2012:070 (samba)
2012-08-03 00:00:00
Debian Security Advisory DSA 140-1 (libpng2, libpng3)
2008-01-17 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: cifs-utils-5.4-1.fc17
2012-05-02 04:47:41
[SECURITY] Fedora 16 Update: cifs-utils-5.4-1.fc16
2012-05-01 00:56:39
[SECURITY] Fedora 15 Update: cifs-utils-5.4-1.fc15
2012-05-01 00:52:15
nvd
nvd
CVE-2012-1586
2012-08-27 23:55:01
redhat
redhat
(RHSA-2012:0902) Low: cifs-utils security, bug fix, and enhancement update
2012-06-20 00:00:00
ubuntucve
ubuntucve
CVE-2012-1586
2012-08-27 00:00:00
centos
centos
cifs security update
2012-07-10 17:26:17
prion
prion
Design/Logic Flaw
2012-08-27 23:55:00
exploitdb
exploitdb
mount.cifs - 'chdir()' Arbitrary Root File Identification
2012-04-25 00:00:00
securityvulns
securityvulns
Samba file existance check
2012-05-10 00:00:00
[ MDVSA-2012:070 ] samba
2012-05-10 00:00:00
oraclelinux
oraclelinux
cifs-utils security, bug fix, and enhancement update
2012-06-27 00:00:00
debiancve
debiancve
CVE-2012-1586
2012-08-27 23:55:01
cve
cve
CVE-2012-1586
2012-08-27 23:55:01
cvelist
cvelist
CVE-2012-1586
2012-08-27 23:00:00
suse
suse
Security update for Samba (important)
2013-02-22 16:04:20
Security update for Samba (important)
2012-05-01 01:08:20