PT-2010-1283 · Samba Team+1 · Samba

Publicado 2010-03-02 · Atualizado 2024-06-15 · CVE-2009-3297

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A security issue in Samba allows malicious, local users to disclose potentially sensitive information and potentially gain escalated privileges. The issue is caused by a race condition within the "mount.cifs" utility, which can be exploited by replacing mountpoints with symlinks. Successful privilege escalation may require that the "mount.cifs" utility is suid root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-3297

OPENSUSE-SU-2024:10378-1

Produtos afetados

Samba

Referências · 6

• https://osv.dev/vulnerability/openSUSE-SU-2024:10378-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-0541 · Nota
• https://samba.org/samba/security/CVE-2009-3297 · Nota
• https://suse.com/security/cve/CVE-2015-3202 · Nota
• https://suse.com/security/cve/CVE-2009-3297 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3297 · Nota de Segurança