CVE-2012-1586

NameCVE-2012-1586
Descriptionmount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
NVD severitylow (attack range: local)
Debian Bugs665923

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cifs-utils (PTS)wheezy2:5.5-1fixed
jessie2:6.4-1fixed
buster, sid, stretch2:6.7-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cifs-utilssource(unstable)2:5.3-2unimportant665923

Notes

Harmless information leak, if a user can perform arbitrary CIFS mounts they probably
can do a lot more with this

Search for package or bug name: Reporting problems