Red Hat Security Advisory 2012-0902-04

newsbot

newsbot

RSS Feed
Red Hat Security Advisory 2012-0902-04 - The cifs-utils package contains tools for mounting and managing shares on Linux using the SMB/CIFS protocol. The CIFS shares can be used as standard Linux file systems. A file existence disclosure flaw was found in mount.cifs. If the tool was installed with the setuid bit set, a local attacker could use this flaw to determine the existence of files or directories in directories not accessible to the attacker. Note: mount.cifs from the cifs-utils package distributed by Red Hat does not have the setuid bit set. We recommend that administrators do not manually set the setuid bit for mount.cifs.

Weiterlesen...
 

Ähnliche Themen

Mandriva Linux Security Advisory 2012-069

Mandriva Linux Security Advisory 2012-070

Red Hat Security Advisory 2013-0126-01

Red Hat Security Advisory 2012-1506-01

Red Hat Security Advisory 2012-0939-04

Zurück
Oben