CVE-2012-1586

Published Aug 27, 2012

Last updated 12 years ago

Overview

Description: mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
Source: secalert@redhat.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:debian:cifs-utils:2.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2B2C208-F9BB-42E3-9F64-1D041165DD16"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References