CVE-2014-2581

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.htmlMailing List, Third Party Advisory
http://sourceforge.net/projects/smb4k/files/1.1.1/Release Notes, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/24/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/25/5Mailing List, Third Party Advisory
https://bugs.gentoo.org/505376Issue Tracking, Patch, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.htmlMailing List, Third Party Advisory
http://sourceforge.net/projects/smb4k/files/1.1.1/Release Notes, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/24/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/03/25/5Mailing List, Third Party Advisory
https://bugs.gentoo.org/505376Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Jan 28, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-25835.8Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users CVE-2014-25854.9ownCloud before 5.0.15 and 6.x before 6.0.2, when the file_external app is enabled, allows remote authenticated users to mount the local fil CVE-2014-25864.3Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote attackers to inject arbi CVE-2014-25876.5SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitra CVE-2014-25884.0Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary CVE-2014-25894.3Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA CVE-2014-25905.0The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allo CVE-2014-25916.9Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an CVE-2014-25929.8Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file CVE-2014-25939.0The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell met CVE-2014-25959.8Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication CVE-2014-25974.9PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buff