CVE-2012-1586
CVE-2012-1586
This page contains facts from public vulnerability sources. Check the original advisory before updating.
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
EPSS 0.7% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
cifs-utils Debian:12
- Affected ranges
- ECOSYSTEM: < 2:5.3-2
Update to 2:5.3-2
cifs-utils Debian:13
- Affected ranges
- ECOSYSTEM: < 2:5.3-2
Update to 2:5.3-2
cifs-utils Debian:14
- Affected ranges
- ECOSYSTEM: < 2:5.3-2
Update to 2:5.3-2
Original sources
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
- http://www.openwall.com/lists/oss-security/2012/03/27/6
- http://www.openwall.com/lists/oss-security/2012/03/27/1
- https://bugzilla.samba.org/show_bug.cgi?id=8821
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
- https://nvd.nist.gov/vuln/detail/CVE-2012-1586