PT-2012-3359 · Unknown+3 · Cifs-Utils+3

Jesus + 1 · Publicado 2012-04-30 · Atualizado 2024-06-15 · CVE-2012-1586

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions cifs-utils version 2.6

Description The issue allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

Recommendations For cifs-utils version 2.6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CESA-2012_0902

CVE-2012-1586

OPENSUSE-SU-2024:10334-1

RHSA-2012:0902

RHSA-2012_0902

SUSE-SU-2012_0571-1

SUSE-SU-2012_0575-1

Produtos afetados

Centos

Red Hat

Suse

Cifs-Utils

Referências · 61

• 🔥 https://exploit-db.com/exploits/18783 · Exploit
• https://access.redhat.com/security/cve/CVE-2012-1586 · Nota
• https://suse.com/security/cve/CVE-2009-2813 · Nota
• https://bdu.fstec.ru/vul/2015-08835 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2012-1586 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/03/27/1 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-1586 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-07564 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2012-0902.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-1586 · Nota
• https://rhn.redhat.com/errata/RHSA-2012-0902.html · Nota
• https://bdu.fstec.ru/vul/2015-07572 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2012-July/030759.html · Nota
• https://bugzilla.samba.org/show_bug.cgi?id=8821 · Nota