LWN.net Logo

samba privilege escalation

Package(s):samba CVE #(s):CAN-2004-0186
Created:March 15, 2004 Updated:April 20, 2004
Description: Samba, a LanManager-like file and printer server for Unix, was found to contain a vulnerability whereby a local user could use the "smbmnt" utility, which is setuid root, to mount a file share from a remote server which contained setuid programs under the control of the user. These programs could then be executed to gain privileges on the local system.
Alerts:
Mandrake MDKSA-2004:035 2004-04-19
Debian DSA-463-1 2004-03-12

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds