Vulnerability Description
Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Smb4K Project | Smb4K | < 1.1.1 |
| Fedoraproject | Fedora | 19 |
Related Weaknesses (CWE)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.htmlMailing ListThird Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.htmlMailing ListThird Party Advisory
- http://sourceforge.net/projects/smb4k/files/1.1.1/Release NotesThird Party Advisory
- http://www.openwall.com/lists/oss-security/2014/03/24/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2014/03/25/5Mailing ListThird Party Advisory
- https://bugs.gentoo.org/505376Issue TrackingPatchThird Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.htmlMailing ListThird Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.htmlMailing ListThird Party Advisory
- http://sourceforge.net/projects/smb4k/files/1.1.1/Release NotesThird Party Advisory
- http://www.openwall.com/lists/oss-security/2014/03/24/1Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2014/03/25/5Mailing ListThird Party Advisory
- https://bugs.gentoo.org/505376Issue TrackingPatchThird Party Advisory
FAQ
What is CVE-2014-2581?
CVE-2014-2581 is a vulnerability with a CVSS score of 7.5 (HIGH). Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
How severe is CVE-2014-2581?
CVE-2014-2581 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-2581?
Check the references section above for vendor advisories and patch information. Affected products include: Smb4K Project Smb4K, Fedoraproject Fedora.