Vulnerability Details CVE-2004-0186
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.1%
CVSS Severity
CVSS v2 Score 7.2
References
- http://marc.info/?l=bugtraq&m=107636290906296&w=2
- http://marc.info/?l=bugtraq&m=107657505718743&w=2
- http://www.debian.org/security/2004/dsa-463
- http://www.osvdb.org/3916
- http://www.securityfocus.com/bid/9619
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15131
- http://marc.info/?l=bugtraq&m=107636290906296&w=2
- http://marc.info/?l=bugtraq&m=107657505718743&w=2
- http://www.debian.org/security/2004/dsa-463
- http://www.osvdb.org/3916
- http://www.securityfocus.com/bid/9619
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15131
Products affected by CVE-2004-0186
-
cpe:2.3:a:samba:samba:2.0
-
cpe:2.3:a:samba:samba:3.0.0
-
cpe:2.3:o:linux:linux_kernel:2.6.0
-
cpe:2.3:o:linux:linux_kernel:2.6.1
-
cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs