OSVDB ID: 3916

Title: Samba smbmnt Local Privilege Escalation

Info

Disclosure

Feb 09, 2004

Discovery

Feb 09, 2004

Dates

Exploit

Unknown

Solution

Unknown

Description

Samba contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when smbmnt is setuid root, and the permissions are not strippped. This flaw may lead to a loss of confidentiality, integrity and/or availability.

Classification

Location: Local Access Required
Attack Type: Misconfiguration
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Remove the setuid bit from "smbmnt"

Products

Andrew Tridgell

Samba

3.0.0
3.0.1
3.0.2

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/3916