Unscored severity · published Aug 27, 2012
CVE-2012-1586
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their…
–
CVSS
0.7%
EPSS
No
On KEV
Description
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cifs-utils · Debian
2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1586
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1586
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/03/27/1
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/03/27/6
bugzilla.samba.org
https://bugzilla.samba.org/show_bug.cgi?id=8821
More from Cifs-utils
–
CVE-2014-2830
Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors