NVD

Id
50167  
Name
CVE-2009-2948  
Description
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-10-07  
Modified Date
2010-08-21  
Seq
2009-2948  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253902 50167 CVE-2009-2948 SUSE-SR:2009:017  View
253903 50167 CVE-2009-2948 http://news.samba.org/releases/3.0.37/  View
253904 50167 CVE-2009-2948 http://news.samba.org/releases/3.2.15/  View
253905 50167 CVE-2009-2948 http://news.samba.org/releases/3.3.8/  View
253906 50167 CVE-2009-2948 http://news.samba.org/releases/3.4.2/  View
253907 50167 CVE-2009-2948 oval:org.mitre.oval:def:10434  View
253908 50167 CVE-2009-2948 oval:org.mitre.oval:def:7087  View
253909 50167 CVE-2009-2948 SSA:2009-276-01  View
253910 50167 CVE-2009-2948 http://www.samba.org/samba/security/CVE-2009-2948.html  View
253911 50167 CVE-2009-2948 36572  View
253912 50167 CVE-2009-2948 1022975  View
253913 50167 CVE-2009-2948 USN-839-1  View
253914 50167 CVE-2009-2948 ADV-2009-2810  View
253915 50167 CVE-2009-2948 samba-mountcifs-info-disclosure(53574)  View
253916 50167 CVE-2009-2948 FEDORA-2009-10180  View
253917 50167 CVE-2009-2948 FEDORA-2009-10172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41192 JVNDB-2009-002199 Samba の mount.cifs における重要な情報を取得される脆弱性 Samba の mount.cifs には、mount.cifs が suid root でインストールされている場合に証明書ファイルのパーミッションを適切に取り扱わない問題があるため、証明書ファイルの一部を読まれ、パスワードを取得される脆弱性が存在します。 CVE-2009-2948 40379 CVE-2009-2948 50167 1.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002199.html 2009-10-07 2010-07-20 View