CVEvulnerability
CVE-2012-1586
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
Affected configurations
• debian cifs-utils 2.6
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923 bugs.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2012/03/27/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/27/6 www.openwall.com
- https://bugzilla.samba.org/show_bug.cgi?id=8821 bugzilla.samba.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923 bugs.debian.org
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2012/03/27/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/27/6 www.openwall.com
- https://bugzilla.samba.org/show_bug.cgi?id=8821 bugzilla.samba.org