Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-2948

mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.9%
CVSS Severity
CVSS v2 Score 1.9
References
Products affected by CVE-2009-2948
  • Samba » Samba » Version: 3.0.0
    cpe:2.3:a:samba:samba:3.0.0
  • Samba » Samba » Version: 3.0.1
    cpe:2.3:a:samba:samba:3.0.1
  • Samba » Samba » Version: 3.0.10
    cpe:2.3:a:samba:samba:3.0.10
  • Samba » Samba » Version: 3.0.11
    cpe:2.3:a:samba:samba:3.0.11
  • Samba » Samba » Version: 3.0.12
    cpe:2.3:a:samba:samba:3.0.12
  • Samba » Samba » Version: 3.0.13
    cpe:2.3:a:samba:samba:3.0.13
  • Samba » Samba » Version: 3.0.14
    cpe:2.3:a:samba:samba:3.0.14
  • Samba » Samba » Version: 3.0.14a
    cpe:2.3:a:samba:samba:3.0.14a
  • Samba » Samba » Version: 3.0.15
    cpe:2.3:a:samba:samba:3.0.15
  • Samba » Samba » Version: 3.0.16
    cpe:2.3:a:samba:samba:3.0.16
  • Samba » Samba » Version: 3.0.17
    cpe:2.3:a:samba:samba:3.0.17
  • Samba » Samba » Version: 3.0.18
    cpe:2.3:a:samba:samba:3.0.18
  • Samba » Samba » Version: 3.0.19
    cpe:2.3:a:samba:samba:3.0.19
  • Samba » Samba » Version: 3.0.2
    cpe:2.3:a:samba:samba:3.0.2
  • Samba » Samba » Version: 3.0.20
    cpe:2.3:a:samba:samba:3.0.20
  • Samba » Samba » Version: 3.0.20a
    cpe:2.3:a:samba:samba:3.0.20a
  • Samba » Samba » Version: 3.0.20b
    cpe:2.3:a:samba:samba:3.0.20b
  • Samba » Samba » Version: 3.0.21
    cpe:2.3:a:samba:samba:3.0.21
  • Samba » Samba » Version: 3.0.21a
    cpe:2.3:a:samba:samba:3.0.21a
  • Samba » Samba » Version: 3.0.21b
    cpe:2.3:a:samba:samba:3.0.21b
  • Samba » Samba » Version: 3.0.21c
    cpe:2.3:a:samba:samba:3.0.21c
  • Samba » Samba » Version: 3.0.22
    cpe:2.3:a:samba:samba:3.0.22
  • Samba » Samba » Version: 3.0.23
    cpe:2.3:a:samba:samba:3.0.23
  • Samba » Samba » Version: 3.0.23a
    cpe:2.3:a:samba:samba:3.0.23a
  • Samba » Samba » Version: 3.0.23b
    cpe:2.3:a:samba:samba:3.0.23b
  • Samba » Samba » Version: 3.0.23c
    cpe:2.3:a:samba:samba:3.0.23c
  • Samba » Samba » Version: 3.0.23d
    cpe:2.3:a:samba:samba:3.0.23d
  • Samba » Samba » Version: 3.0.24
    cpe:2.3:a:samba:samba:3.0.24
  • Samba » Samba » Version: 3.0.25
    cpe:2.3:a:samba:samba:3.0.25
  • Samba » Samba » Version: 3.0.25a
    cpe:2.3:a:samba:samba:3.0.25a
  • Samba » Samba » Version: 3.0.25b
    cpe:2.3:a:samba:samba:3.0.25b
  • Samba » Samba » Version: 3.0.25c
    cpe:2.3:a:samba:samba:3.0.25c
  • Samba » Samba » Version: 3.0.26
    cpe:2.3:a:samba:samba:3.0.26
  • Samba » Samba » Version: 3.0.26a
    cpe:2.3:a:samba:samba:3.0.26a
  • Samba » Samba » Version: 3.0.27
    cpe:2.3:a:samba:samba:3.0.27
  • Samba » Samba » Version: 3.0.28
    cpe:2.3:a:samba:samba:3.0.28
  • Samba » Samba » Version: 3.0.29
    cpe:2.3:a:samba:samba:3.0.29
  • Samba » Samba » Version: 3.0.2a
    cpe:2.3:a:samba:samba:3.0.2a
  • Samba » Samba » Version: 3.0.3
    cpe:2.3:a:samba:samba:3.0.3
  • Samba » Samba » Version: 3.0.30
    cpe:2.3:a:samba:samba:3.0.30
  • Samba » Samba » Version: 3.0.31
    cpe:2.3:a:samba:samba:3.0.31
  • Samba » Samba » Version: 3.0.32
    cpe:2.3:a:samba:samba:3.0.32
  • Samba » Samba » Version: 3.0.33
    cpe:2.3:a:samba:samba:3.0.33
  • Samba » Samba » Version: 3.0.34
    cpe:2.3:a:samba:samba:3.0.34
  • Samba » Samba » Version: 3.0.35
    cpe:2.3:a:samba:samba:3.0.35
  • Samba » Samba » Version: 3.0.36
    cpe:2.3:a:samba:samba:3.0.36
  • Samba » Samba » Version: 3.0.4
    cpe:2.3:a:samba:samba:3.0.4
  • Samba » Samba » Version: 3.0.5
    cpe:2.3:a:samba:samba:3.0.5
  • Samba » Samba » Version: 3.0.6
    cpe:2.3:a:samba:samba:3.0.6
  • Samba » Samba » Version: 3.0.7
    cpe:2.3:a:samba:samba:3.0.7
  • Samba » Samba » Version: 3.0.8
    cpe:2.3:a:samba:samba:3.0.8
  • Samba » Samba » Version: 3.0.9
    cpe:2.3:a:samba:samba:3.0.9
  • Samba » Samba » Version: 3.2.0
    cpe:2.3:a:samba:samba:3.2.0
  • Samba » Samba » Version: 3.2.1
    cpe:2.3:a:samba:samba:3.2.1
  • Samba » Samba » Version: 3.2.10
    cpe:2.3:a:samba:samba:3.2.10
  • Samba » Samba » Version: 3.2.11
    cpe:2.3:a:samba:samba:3.2.11
  • Samba » Samba » Version: 3.2.12
    cpe:2.3:a:samba:samba:3.2.12
  • Samba » Samba » Version: 3.2.13
    cpe:2.3:a:samba:samba:3.2.13
  • Samba » Samba » Version: 3.2.14
    cpe:2.3:a:samba:samba:3.2.14
  • Samba » Samba » Version: 3.2.2
    cpe:2.3:a:samba:samba:3.2.2
  • Samba » Samba » Version: 3.2.3
    cpe:2.3:a:samba:samba:3.2.3
  • Samba » Samba » Version: 3.2.4
    cpe:2.3:a:samba:samba:3.2.4
  • Samba » Samba » Version: 3.2.5
    cpe:2.3:a:samba:samba:3.2.5
  • Samba » Samba » Version: 3.2.6
    cpe:2.3:a:samba:samba:3.2.6
  • Samba » Samba » Version: 3.2.7
    cpe:2.3:a:samba:samba:3.2.7
  • Samba » Samba » Version: 3.2.8
    cpe:2.3:a:samba:samba:3.2.8
  • Samba » Samba » Version: 3.2.9
    cpe:2.3:a:samba:samba:3.2.9
  • Samba » Samba » Version: 3.3.0
    cpe:2.3:a:samba:samba:3.3.0
  • Samba » Samba » Version: 3.3.1
    cpe:2.3:a:samba:samba:3.3.1
  • Samba » Samba » Version: 3.3.2
    cpe:2.3:a:samba:samba:3.3.2
  • Samba » Samba » Version: 3.3.3
    cpe:2.3:a:samba:samba:3.3.3
  • Samba » Samba » Version: 3.3.4
    cpe:2.3:a:samba:samba:3.3.4
  • Samba » Samba » Version: 3.3.5
    cpe:2.3:a:samba:samba:3.3.5
  • Samba » Samba » Version: 3.3.6
    cpe:2.3:a:samba:samba:3.3.6
  • Samba » Samba » Version: 3.3.7
    cpe:2.3:a:samba:samba:3.3.7
  • Samba » Samba » Version: 3.4.0
    cpe:2.3:a:samba:samba:3.4.0
  • Samba » Samba » Version: 3.4.1
    cpe:2.3:a:samba:samba:3.4.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved