PT-2020-7626 · Smb4K · Smb4K

Heiner Markert · Published 2014-06-20 · Updated 2020-01-30 · CVE-2014-2581

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Smb4K versions prior to 1.1.1

Description The issue allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.

Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2014-2581

MGASA-2014-0271

Affected Products

Smb4K

References · 22

• https://osv.dev/vulnerability/DEBIAN-CVE-2014-2581 · Vendor Advisory
• https://bugs.gentoo.org/505376 · Patch
• https://ubuntu.com/security/CVE-2014-2581 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-2581 · Security Note
• https://advisories.mageia.org/MGASA-2014-0271.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-2581 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-2581 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0271 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-2581 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2581 · Security Note
• http://openwall.com/lists/oss-security/2014/03/24/1 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=505376#c4 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.html · Note
• http://openwall.com/lists/oss-security/2014/03/25/5 · Note