CVE-2004-0186

CVE-2004-0186 describes a local privilege escalation vulnerability in Samba 2.x and 3.x on Linux 2.6 systems where smbmnt is installed setuid. An attacker can gain root privileges by mounting a malicious Samba share containing a setuid root program, as the setuid attributes are not properly cleared. This vulnerability has a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an ExploitDB entry exists (EDB-23674), suggesting exploit code is publicly available, though there is no evidence of active exploitation or significant community discussion.