Search for vulnerabilities
Vulnerability details: VCID-bb97-uduq-aaaf
Vulnerability ID VCID-bb97-uduq-aaaf
Aliases CVE-2004-0186
Summary smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.
Status Published
Exploitability 2.0
Weighted Severity 6.5
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00309 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
epss 0.00525 https://api.first.org/data/v1/epss?cve=CVE-2004-0186
cvssv2 7.2 https://nvd.nist.gov/vuln/detail/CVE-2004-0186
Reference id Reference type URL
http://marc.info/?l=bugtraq&m=107636290906296&w=2
http://marc.info/?l=bugtraq&m=107657505718743&w=2
https://api.first.org/data/v1/epss?cve=CVE-2004-0186
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0186
https://exchange.xforce.ibmcloud.com/vulnerabilities/15131
http://www.debian.org/security/2004/dsa-463
http://www.osvdb.org/3916
http://www.securityfocus.com/bid/9619
cpe:2.3:a:samba:samba:2.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba:2.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*
CVE-2004-0186 https://nvd.nist.gov/vuln/detail/CVE-2004-0186
CVE-2004-0186;OSVDB-3916 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/23674.txt
CVE-2004-0186;OSVDB-3916 Exploit https://www.securityfocus.com/bid/9619/info
Data source Exploit-DB
Date added Feb. 9, 2004
Description Samba 2.2.8 (Linux Kernel 2.6 / Debian / Mandrake) - Share Privilege Escalation
Ransomware campaign use Known
Source publication date Feb. 9, 2004
Exploit type local
Platform linux
Source update date Dec. 2, 2016
Source URL https://www.securityfocus.com/bid/9619/info
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2004-0186
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.05171
EPSS Score 0.00042
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.