CVE-2010-0787
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
Exploit likelihood
What each source reports
NVD Score used
4.4
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
CVE-2010-0787- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
CVE-2010-0787- Updated
- 2026-11-02
EUVDEUVD-2010-0813 No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
EUVD-2010-0813- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-55gw-qcg5-xjrx No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
GHSA-55gw-qcg5-xjrx- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
CVE-2010-0787- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0787 No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
- Record
DEBIAN-CVE-2010-0787- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10334-1 No score
cifs-utils-6.5-1.5 on GA media
These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10334-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:13 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:14 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:5.0 From an advisory covering 2 CVEs |
before 2:3.2.5-4lenny9, plus listed versions 2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny8 |
2:3.2.5-4lenny9 |
samba3xRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
sambaRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
libsmbclientRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclientRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaopenSUSE:Tumbleweed From an advisory covering 56 CVEs |
before 4.5.0-1.1 | 4.5.0-1.1 |
cifs-utilsopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 6.5-1.5 | 6.5-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0787 is a medium vulnerability (CVSS 4.4) in Samba, published February 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in samba 2:3.4.5~dfsg-2.
References
secunia.com/advisories/38286
vupen.com/english/advisories/2010/1062
lists.fedoraproject.org/pipermail/package-announce/2010-January/034470.html
secunia.com/advisories/38308
bugzilla.redhat.com/show_bug.cgi?id=558833
security.gentoo.org/glsa/glsa-201206-29.xml
Show 118 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2010-January/034444.html
securityfocus.com/bid/39898
git.samba.org?p=samba.git%3Ba=commit%3Bh=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5
ubuntu.com/usn/USN-893-1
mandriva.com/security/advisories?name=MDVSA-2010:090
bugzilla.redhat.com/show_bug.cgi?id=532940
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
securityfocus.com/bid/37992
git.samba.org?p=samba.git%3Ba=commit%3Bh=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80
secunia.com/advisories/38357
bugzilla.samba.org/show_bug.cgi?id=6853
exchange.xforce.ibmcloud.com/vulnerabilities/55944
nvd.nist.gov/vuln/detail/CVE-2010-0787
git.samba.org?p=samba.git;a=commit;h=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80
git.samba.org?p=samba.git;a=commit;h=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5
github.com/advisories/GHSA-55gw-qcg5-xjrx
security-tracker.debian.org/tracker/CVE-2010-0787
access.redhat.com/errata/RHBA-2011:0054
bugzilla.redhat.com/show_bug.cgi?id=459842
bugzilla.redhat.com/show_bug.cgi?id=480405
bugzilla.redhat.com/show_bug.cgi?id=527997
bugzilla.redhat.com/show_bug.cgi?id=560239
bugzilla.redhat.com/show_bug.cgi?id=565774
bugzilla.redhat.com/show_bug.cgi?id=565915
bugzilla.redhat.com/show_bug.cgi?id=568778
bugzilla.redhat.com/show_bug.cgi?id=582756
bugzilla.redhat.com/show_bug.cgi?id=590610
bugzilla.redhat.com/show_bug.cgi?id=590766
bugzilla.redhat.com/show_bug.cgi?id=596886
bugzilla.redhat.com/show_bug.cgi?id=609578
bugzilla.redhat.com/show_bug.cgi?id=641379
bugzilla.redhat.com/show_bug.cgi?id=643041
bugzilla.redhat.com/show_bug.cgi?id=649708
bugzilla.redhat.com/show_bug.cgi?id=651722
security.access.redhat.com/data/csaf/v2/advisories/2011/rhba-2011_0054.json
access.redhat.com/security/cve/CVE-2010-0547
bugzilla.redhat.com/show_bug.cgi?id=562156
cve.org/CVERecord?id=CVE-2010-0547
nvd.nist.gov/vuln/detail/CVE-2010-0547
access.redhat.com/security/cve/CVE-2010-0787
bugzilla.redhat.com/show_bug.cgi?id=577277
cve.org/CVERecord?id=CVE-2010-0787
access.redhat.com/errata/RHSA-2011:1219
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=695925
bugzilla.redhat.com/show_bug.cgi?id=721348
bugzilla.redhat.com/show_bug.cgi?id=722537
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1219.json
access.redhat.com/security/cve/CVE-2011-1678
cve.org/CVERecord?id=CVE-2011-1678
nvd.nist.gov/vuln/detail/CVE-2011-1678
access.redhat.com/security/cve/CVE-2011-2522
cve.org/CVERecord?id=CVE-2011-2522
nvd.nist.gov/vuln/detail/CVE-2011-2522
access.redhat.com/security/cve/CVE-2011-2694
cve.org/CVERecord?id=CVE-2011-2694
nvd.nist.gov/vuln/detail/CVE-2011-2694
access.redhat.com/security/cve/CVE-2011-3585
bugzilla.redhat.com/show_bug.cgi?id=742907
cve.org/CVERecord?id=CVE-2011-3585
nvd.nist.gov/vuln/detail/CVE-2011-3585
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-0240
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119
suse.com/security/cve/CVE-2012-1586