CVE-2004-0186

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-03-15 · updated 2026-06-16

Description

smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.

Affected products

Linux kernel: 2.6.0, 2.6.0-test1, 2.6.0-test10, 2.6.0-test11, 2.6.0-test2, 2.6.0-test3 (+9)
Samba: 2.0, 3.0.0

References

http://marc.info/?l=bugtraq&m=107636290906296&w=2
http://marc.info/?l=bugtraq&m=107657505718743&w=2
http://www.debian.org/security/2004/dsa-463
http://www.osvdb.org/3916
http://www.securityfocus.com/bid/9619
https://exchange.xforce.ibmcloud.com/vulnerabilities/15131
http://marc.info/?l=bugtraq&m=107636290906296&w=2
http://marc.info/?l=bugtraq&m=107657505718743&w=2
http://www.debian.org/security/2004/dsa-463
http://www.osvdb.org/3916
http://www.securityfocus.com/bid/9619
https://exchange.xforce.ibmcloud.com/vulnerabilities/15131

Get alerted when CVE-2004-0186 or the next vulnerability affects your stack