Skip to content
OpenAdvisories

Package · Debian

smb4k

9 known vulnerabilities.

9 results · Feed

  • High 7.3

    Local users can perform a local root exploit via smb4k mounthelper

    An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5.

  • Medium 6.9

    Local users can perform arbitrary unmounts via smb4k mount helper due to lack of input validation

    An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper

  • Unscored —

    Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additio…

  • Unscored —
    CVE-2017-8849 Public exploit

    smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount he…

  • Unscored —

    The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across …

  • Unscored —

    Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on…

  • Unscored —

    Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipula…

  • Unscored —

    Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a…

  • Unscored —

    smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) sm…