CVE-2009-2948: Low severity samba vulnerability
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2948?
CVE-2009-2948 is considered a high severity vulnerability due to improper permission enforcement allowing local users to access sensitive information.
How do I fix CVE-2009-2948?
To fix CVE-2009-2948, you should upgrade Samba to version 3.0.37 or later, 3.2.15 or later, 3.3.8 or later, or 3.4.2 or later.
Who is affected by CVE-2009-2948?
CVE-2009-2948 affects users of Samba versions prior to 3.0.37, 3.2.15, 3.3.8, and 3.4.2 when mount.cifs is installed with SUID root permissions.
What type of attack does CVE-2009-2948 enable?
CVE-2009-2948 enables local users to potentially read sensitive portions of the credentials file, including passwords.
Is there a workaround for CVE-2009-2948?
A temporary workaround for CVE-2009-2948 is to remove the SUID bit from mount.cifs until the software can be updated.