Description
mount.cifs in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8 and 3.4 before 3.4.2, when mount.cifs is installed suid root, does not properly enforce permissions, which allows local users to read part of the credentials file and obtain the password by specifying the path to the credentials file and using the --verbose or -v option.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:3.4.2-1 | — |
| Debian 13 | samba | 2:3.4.2-1 | — |
| Debian 12 | samba | 2:3.4.2-1 | — |
| Debian 5.0 | samba | 2:3.2.5-4lenny7 | DSA-1908-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | libsmbclient +1 | 3.0.34-46.el5 | RHSA-2009:1585 |
| RHEL 5 | libtalloc +1 | 1.2.0-46.el5 | RHSA-2009:1585 |
| RHEL 5 | libtdb +2 | 1.1.2-46.el5 | RHSA-2009:1585 |
| RHEL 5 | samba +3 | 3.0.33-3.15.el5_4 | RHSA-2009:1529 |
| RHEL 5 | samba3x +7 | 3.3.8-0.46.el5 | RHSA-2009:1585 |
| RHEL 4 | samba +3 | 3.0.33-0.18.el4_8 | RHSA-2009:1529 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cifs-utils | 6.5-1.5 | openSUSE-SU-2024:10334-1 |
| openSUSE Tumbleweed | samba | 4.5.0-1.1 | openSUSE-SU-2024:10069-1 |
Advisories 5
- RHSA-2009:1585 Red Hat Security Advisory: samba3x security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1529 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-1908-1 samba - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10069-1 ctdb-4.5.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10334-1 cifs-utils-6.5-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- http://www.samba.org/samba/security/CVE-2009-2948.html
- http://news.samba.org/releases/3.4.2/
- FEDORA-2009-10172 vendor-advisory
- 58520 vdb-entry
- 1022975 vdb-entry
- http://news.samba.org/releases/3.2.15/
- oval:org.mitre.oval:def:7087 vdb-entry signature
- 36572 vdb-entry
- ADV-2009-2810 vdb-entry
- SSA:2009-276-01 vendor-advisory
- 36937 third-party-advisory
- USN-839-1 vendor-advisory
- http://news.samba.org/releases/3.0.37/
- oval:org.mitre.oval:def:10434 vdb-entry signature
- 36918 third-party-advisory
- 36893 third-party-advisory
- samba-mountcifs-info-disclosure(53574) vdb-entry
- http://news.samba.org/releases/3.3.8/
- 36953 third-party-advisory
- SUSE-SR:2009:017 vendor-advisory
- FEDORA-2009-10180 vendor-advisory