Total vulnerabilities in the database
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
| Software | From | Fixed in |
|---|---|---|
| smb4k / smb4k | 0.7 | 0.7.x |
| smb4k / smb4k | 0.4 | 0.4.x |
| smb4k / smb4k | 0.6 | 0.6.x |
| smb4k / smb4k | 0.5 | 0.5.x |