CVE-2014-2581
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid...
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
CVE-2014-2581- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
CVE-2014-2581- Updated
- 2026-11-02
EUVDEUVD-2014-2613 No score
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
EUVD-2014-2613- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g2w-hm82-9vhv No score
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid...
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
GHSA-7g2w-hm82-9vhv- Updated
- 2026-11-02
OSV
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
CVE-2014-2581- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-2581
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
DEBIAN-CVE-2014-2581- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-2581
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
- Record
UBUNTU-CVE-2014-2581- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2014-0271 No score
Updated smb4k packages fix CVE-2014-2581
Updated smb4k packages fix security vulnerability:
Smb4k before 1.1.1 allows the cruid CIFS mount option to be specified by the user (CVE-2014-2581).
The smb4k package has been updated to version 1.1.2, which fixes this issue and also contains several other bug fixes and additions.
- Record
MGASA-2014-0271- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2581 is a high vulnerability (CVSS 7.5) in Smb4k Project Smb4k, published June 20, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in smb4k 1.1.2-1.
References
sourceforge.net/projects/smb4k/files/1.1.1
openwall.com/lists/oss-security/2014/03/24/1
lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.html
bugs.gentoo.org/505376
Show 11 moreShow less
nvd.nist.gov/vuln/detail/CVE-2014-2581
github.com/advisories/GHSA-7g2w-hm82-9vhv
security-tracker.debian.org/tracker/CVE-2014-2581
advisories.mageia.org/MGASA-2014-0271.html
bugs.mageia.org/show_bug.cgi?id=13478
ubuntu.com/security/CVE-2014-2581
cve.org/CVERecord?id=CVE-2014-2581