Home > Vulnerability Database > CVE-2012-1586

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2012-1586

Date: August 27, 2012

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

Language: C

Severity Score

4.0

Related Resources (9)

Url: https://security-tracker.debian.org/tracker/CVE-2012-1586

Url: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923

Url: http://www.openwall.com/lists/oss-security/2012/03/27/1

Url: https://bugzilla.samba.org/show_bug.cgi?id=8821

Url: http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-1586

Url: https://access.redhat.com/security/cve/CVE-2012-1586

Url: http://www.openwall.com/lists/oss-security/2012/03/27/6

Url: https://www.mend.io/vulnerability-database/CVE-2012-1586

Severity Score

4.0

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us