CVE-2011-2724

2011-09-0616:55:10

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

OSVersionArchitecturePackageVersionFilename
Debian12allcifs-utils< 2:5.1-1cifs-utils_2:5.1-1_all.deb
Debian11allcifs-utils< 2:5.1-1cifs-utils_2:5.1-1_all.deb
Debian999allcifs-utils< 2:5.1-1cifs-utils_2:5.1-1_all.deb
Debian13allcifs-utils< 2:5.1-1cifs-utils_2:5.1-1_all.deb
Debian12allsamba< 2:3.4.7~dfsg-2samba_2:3.4.7~dfsg-2_all.deb
Debian11allsamba< 2:3.4.7~dfsg-2samba_2:3.4.7~dfsg-2_all.deb
Debian999allsamba< 2:3.4.7~dfsg-2samba_2:3.4.7~dfsg-2_all.deb
Debian13allsamba< 2:3.4.7~dfsg-2samba_2:3.4.7~dfsg-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cifs-utils	< 2:5.1-1	cifs-utils_2:5.1-1_all.deb
Debian	11	all	cifs-utils	< 2:5.1-1	cifs-utils_2:5.1-1_all.deb
Debian	999	all	cifs-utils	< 2:5.1-1	cifs-utils_2:5.1-1_all.deb
Debian	13	all	cifs-utils	< 2:5.1-1	cifs-utils_2:5.1-1_all.deb
Debian	12	all	samba	< 2:3.4.7~dfsg-2	samba_2:3.4.7~dfsg-2_all.deb
Debian	11	all	samba	< 2:3.4.7~dfsg-2	samba_2:3.4.7~dfsg-2_all.deb
Debian	999	all	samba	< 2:3.4.7~dfsg-2	samba_2:3.4.7~dfsg-2_all.deb
Debian	13	all	samba	< 2:3.4.7~dfsg-2	samba_2:3.4.7~dfsg-2_all.deb