CVE-2012-1586

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
http://www.openwall.com/lists/oss-security/2012/03/27/6
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
https://bugzilla.samba.org/show_bug.cgi?id=8821
http://www.openwall.com/lists/oss-security/2012/03/27/1

Configurations

Configuration 1 (hide)

cpe:2.3:a:debian:cifs-utils:2.6:*:*:*:*:*:*:*

Information

Published : 2012-08-27 16:55

Updated : 2012-08-27 21:00

NVD link : CVE-2012-1586

Mitre link : CVE-2012-1586

JSON object : View

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Products Affected

debian

cifs-utils

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923", "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923", "tags": [], "refsource": "MISC"}, {"url": "http://www.openwall.com/lists/oss-security/2012/03/27/6", "name": "[oss-security] 20120327 Re: CVE id request: cifs-utils", "tags": [], "refsource": "MLIST"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html", "name": "SUSE-SU-2012:0575", "tags": [], "refsource": "SUSE"}, {"url": "https://bugzilla.samba.org/show_bug.cgi?id=8821", "name": "https://bugzilla.samba.org/show_bug.cgi?id=8821", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2012/03/27/1", "name": "[oss-security] 20120327 CVE id request: cifs-utils", "tags": [], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-1586", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-08-27T23:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:debian:cifs-utils:2.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2012-08-28T04:00Z"}

2.1 /10