CVE-2012-1586

Published: Aug 27, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

Affected (1)

Products: Debian: Cifs Utils

Debian

1 product

Cifs Utils

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Cifs Utils	Version 2.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/27/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/27/6

Source: secalert@redhat.com

https://bugzilla.samba.org/show_bug.cgi?id=8821

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923