smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Samba | Samba | 2.0 (including) | 2.0 (including) |
Samba | Samba | 3.0.0 (including) | 3.0.0 (including) |