{"id":"CVE-2009-2948","aliases":["DEBIAN-CVE-2009-2948","DSA-1908-1","EUVD-2009-2935","GHSA-fwxv-68qg-w737","RHSA-2009:1529","RHSA-2009:1585","openSUSE-SU-2024:10069-1","openSUSE-SU-2024:10334-1"],"status":"published","title":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2,...","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","severity":{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0052,"percentile":0.44443,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2009-10-07T18:00:00Z","modified":"2026-10-23T17:47:33Z","fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:3.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:3.4.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.2.5-4lenny7"}]}],"versions":["2:3.2.5-4","2:3.2.5-4lenny1","2:3.2.5-4lenny2","2:3.2.5-4lenny3","2:3.2.5-4lenny4","2:3.2.5-4lenny6"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-0.18.el4_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.33-3.15.el5_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.34-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.34-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libtalloc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libtalloc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libtdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"libtdb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"samba3x-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"tdb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.34-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.34-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libtalloc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libtalloc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libtdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"libtdb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"samba3x-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.8-0.46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"tdb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-46.el5"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.1"}]}],"bundled":56},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1.5"}]}],"bundled":9}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://www.samba.org/samba/security/CVE-2009-2948.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://news.samba.org/releases/3.4.2/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory","advisory","web"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00098.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://osvdb.org/58520","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link","web"]},{"url":"http://www.securitytracker.com/id?1022975","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Patch","Third Party Advisory","VDB Entry","advisory","fix","web"]},{"url":"http://news.samba.org/releases/3.2.15/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory","advisory","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7087","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/36572","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","Third Party Advisory","VDB Entry","advisory","fix"]},{"url":"http://www.vupen.com/english/advisories/2009/2810","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Permissions Required","Vendor Advisory","advisory","report"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.561439","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"http://secunia.com/advisories/36937","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-839-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://news.samba.org/releases/3.0.37/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory","advisory","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10434","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link","Third Party Advisory","advisory","web"]},{"url":"http://secunia.com/advisories/36918","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/36893","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/53574","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://news.samba.org/releases/3.3.8/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link","Vendor Advisory","advisory","web"]},{"url":"http://secunia.com/advisories/36953","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00095.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2948","tags":["advisory"]},{"url":"http://news.samba.org/releases/3.0.37"},{"url":"http://news.samba.org/releases/3.2.15"},{"url":"http://news.samba.org/releases/3.3.8"},{"url":"http://news.samba.org/releases/3.4.2"},{"url":"https://github.com/advisories/GHSA-fwxv-68qg-w737"},{"url":"https://security-tracker.debian.org/tracker/CVE-2009-2948","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1529","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526645","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=506996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=523752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=526074","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1529.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-1888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2813","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2906","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2906","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-2948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2948","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1585","tags":["advisory"]},{"url":"http://samba.org/samba/history/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=529022","tags":["report"]},{"url":"http://www.redhat.com/support/policy/soc/production/preview_scope/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=524551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528633","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1585.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1586","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2009-2948","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2009-10-07T18:00:00Z","modified":"2024-08-07T06:07:37.34Z","updated_at":"2026-11-02T14:33:23.395558Z"}],"euvd":[{"id":"EUVD-2009-2935","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2009-10-07T18:00:00Z","modified":"2024-08-07T06:07:37Z","updated_at":"2026-11-03T01:39:15.535048Z"}],"ghsa":[{"id":"GHSA-fwxv-68qg-w737","title":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2,...","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2022-05-02T03:40:13Z","modified":"2025-04-09T04:16:14Z","cwes":["CWE-732"],"updated_at":"2026-11-02T15:01:01.075702Z"}],"nvd":[{"id":"CVE-2009-2948","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2009-10-07T18:30:00.92Z","modified":"2026-06-16T23:10:33.48Z","cvss":[{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:01:37.004244Z"}],"osv":[{"id":"CVE-2009-2948","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2009-10-07T18:30:00Z","modified":"2026-04-10T03:40:52.317849Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2009-2948","description":"mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.","status":"published","published":"2009-10-07T18:30:00.92Z","modified":"2026-10-23T17:47:33.670878433Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"DSA-1908-1","title":"samba - several vulnerabilities","status":"published","published":"2009-10-14T00:00:00Z","modified":"2026-03-09T01:20:21.942768Z","updated_at":"2026-11-02T15:46:14.734124Z"},{"id":"openSUSE-SU-2024:10069-1","title":"ctdb-4.5.0-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:57.807269Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10334-1","title":"cifs-utils-6.5-1.5 on GA media","description":"These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:45.814415Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2009:1529","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-13T06:45:42Z","modified":"2026-06-29T10:02:35Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:1585","title":"Red Hat Security Advisory: samba3x security and bug fix update","status":"published","published":"2024-09-13T06:46:17Z","modified":"2026-06-29T10:02:41Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}