cifs-utils: file existence disclosure flaw
| Package(s): | cifs-utils |
CVE #(s): | CVE-2012-1586
|
| Created: | May 1, 2012 |
Updated: | July 16, 2012 |
| Description: |
From the Red Hat bugzilla:
A file existence disclosure flaw was found in the way mount.cifs tool of the
Samba SMB/CIFS tools suite performed mount of a Linux CIFS (Common Internet
File System) filesystem. A local user, able to mount a remote CIFS share /
target to a local directory could use this flaw to confirm (non) existence of a
file system object (file, directory or process descriptor) via error messages
generated during the mount.cifs tool run. |
| Alerts: |
|
