CVE-2012-1586

N/A

Description

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

CVE Details

CVSS v3.1 ScoreN/A

Published8/27/2012

Last Modified4/11/2025

Sourcenvd

Honeypot Sightings0

Affected Products

debian:cifs-utils

Weaknesses (CWE)

CWE-200

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923(secalert@redhat.com)

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2012/03/27/1(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2012/03/27/6(secalert@redhat.com)

https://bugzilla.samba.org/show_bug.cgi?id=8821(secalert@redhat.com)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2012/03/27/1(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2012/03/27/6(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.samba.org/show_bug.cgi?id=8821(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.