CVE-2012-1586: debian cifs-utils
CVSS: 2.1v2.0LowModified
AliasesRHSA-2012:0902UBUNTU-CVE-2012-1586DEBIAN-CVE-2012-1586
Published 27-08-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-1586 is a low (CVSS 2.1) vulnerability in debian cifs-utils. EPSS estimates a 0.73% chance of exploitation in the next 30 days, higher than 53.3% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
2.1/10
010
Low · v2.0 (NVD)EPSS score
0.73%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 27-08-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
CVSS metrics
1 score · 1 source · 1 versionLow 2.1Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.73%
Chance of exploitation in the next 30 days
Percentile
53%
Versus all other CVEs
30-day change
0.00 pp
From 0.73% on 18-09-2026
18-09-202618-10-2026
EPSS score0.73%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundmount.cifs - 'chdir()' Arbitrary Root File Identification
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Debian2 products
- cifs-utils< 2:5.3-2
- cifs-utils2.6
Redhat2 products
- cifs-utils< 0:4.8.1-10.el6
- cifs-utils-debuginfo< 0:4.8.1-10.el6
Ubuntu1 product
- cifs-utils< 2:6.4-1ubuntu1.1
3 vendors · 5 products
References
16 links- bugzilla.samba.org/show_bug.cgi?id=8821X Refsource CONFIRM
bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923X Refsource MISC
