NetSight
IP …
high7.2Public exploit code

CVE-2004-0186

smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid ro…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.

Affected products

VendorProductAffected versions
SambaSamba
Versions 2.0, 3.0.0
LinuxLinux Kernel
Versions 2.6.0, 2.6.1, 2.6_test9_cvs

References