Information disclosure in Debian Cifs-Utils

CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

Vulnerability class: Information Disclosure

EPSS: 0.007 (50.5th percentile) — read the EPSS interpretation.

Affected products

Debian Cifs-utils — versions 2.6
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_MISC)