Vulnerability in Samba

CVE-2009-2948

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.

EPSS: 0.005 (41.1th percentile) — read the EPSS interpretation.

Affected products

  • Samba
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Patch, Third Party Advisory)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
  • cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)
  • cve@mitre.org (Broken Link, signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, Patch, Third Party Advisory, x_refsource_SLACKWARE)

Frequently asked questions

What is CVE-2009-2948?
CVE-2009-2948 is a vulnerability in Samba, classified under Incorrect Permission Assignment for Critical Resource. Published 2009-10-07.
Is CVE-2009-2948 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.