{"id":"CVE-2014-2581","aliases":["DEBIAN-CVE-2014-2581","EUVD-2014-2613","GHSA-7g2w-hm82-9vhv","MGASA-2014-0271","UBUNTU-CVE-2014-2581"],"status":"published","title":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid...","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02653,"percentile":0.85758,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522"],"published":"2014-06-20T19:43:21Z","modified":"2026-10-23T16:01:22Z","fixes":[{"ecosystem":"Debian:13","package":"smb4k","fixed_in":["1.1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"smb4k","fixed_in":["1.1.2-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"smb4k","fixed_in":["1.1.2-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"smb4k","fixed_in":["1.1.2-1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"smb4k","fixed_in":["1.1.2-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"smb4k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"smb4k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"smb4k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"smb4k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-1.mga4"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"smb4k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"smb4k_project","product":"smb4k"}],"references":[{"url":"http://sourceforge.net/projects/smb4k/files/1.1.1/","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/24/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/25/5","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://bugs.gentoo.org/505376","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2581"},{"url":"https://github.com/advisories/GHSA-7g2w-hm82-9vhv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-2581","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0271.html","tags":["advisory"]},{"url":"http://sourceforge.net/projects/smb4k/files/1.1.0/","tags":["web"]},{"url":"http://sourceforge.net/projects/smb4k/files/1.1.2/","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-2581","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/25","tags":["report"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=505376#c4","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-2581","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-2581","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T14:15:51Z","modified":"2024-08-06T10:21:35.22Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2014-2613","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T14:15:51Z","modified":"2024-08-06T10:21:35Z","updated_at":"2026-11-03T01:57:14.00634Z"}],"ghsa":[{"id":"GHSA-7g2w-hm82-9vhv","title":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid...","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2022-05-17T19:57:21Z","modified":"2023-01-28T05:04:39Z","updated_at":"2026-11-02T14:44:13.169568Z"}],"nvd":[{"id":"CVE-2014-2581","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T15:15:14.81Z","modified":"2026-06-17T00:06:50.19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"CVE-2014-2581","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T15:15:14Z","modified":"2026-04-16T06:25:31.386496854Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-2581","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T15:15:14.81Z","modified":"2026-10-23T16:01:22.606885603Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-2581","description":"Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the \"Additional options\" line edit.","status":"published","published":"2020-01-28T15:15:00Z","modified":"2025-09-08T16:43:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"MGASA-2014-0271","title":"Updated smb4k packages fix CVE-2014-2581","description":"Updated smb4k packages fix security vulnerability:\n\nSmb4k before 1.1.1 allows the cruid CIFS mount option to be specified\nby the user (CVE-2014-2581).\n\nThe smb4k package has been updated to version 1.1.2, which fixes this\nissue and also contains several other bug fixes and additions.\n","status":"published","published":"2014-06-20T19:43:21Z","modified":"2026-04-16T06:25:37.084462952Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}