CVE-2012-1586

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-27 · updated 2026-06-16
Weakness: CWE-200

Description

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

Affected products

Debian Cifs-Utils: 2.6

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
http://www.openwall.com/lists/oss-security/2012/03/27/1
http://www.openwall.com/lists/oss-security/2012/03/27/6
https://bugzilla.samba.org/show_bug.cgi?id=8821
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665923
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00024.html
http://www.openwall.com/lists/oss-security/2012/03/27/1
http://www.openwall.com/lists/oss-security/2012/03/27/6
https://bugzilla.samba.org/show_bug.cgi?id=8821

Get alerted when CVE-2012-1586 or the next vulnerability affects your stack