PT-2010-1283 · Samba Team+1 · Samba

Published 2010-03-02 · Updated 2024-06-15 · CVE-2009-3297

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A security issue in Samba allows malicious, local users to disclose potentially sensitive information and potentially gain escalated privileges. The issue is caused by a race condition within the "mount.cifs" utility, which can be exploited by replacing mountpoints with symlinks. Successful privilege escalation may require that the "mount.cifs" utility is suid root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-3297

OPENSUSE-SU-2024:10378-1

Affected Products

Samba

References · 6

• https://osv.dev/vulnerability/openSUSE-SU-2024:10378-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3297 · Security Note
• https://suse.com/security/cve/CVE-2011-0541 · Note
• https://samba.org/samba/security/CVE-2009-3297 · Note
• https://suse.com/security/cve/CVE-2015-3202 · Note
• https://suse.com/security/cve/CVE-2009-3297 · Note