CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
EPSS
Percentile
5.1%
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel
before 2.6.36 does not properly determine the associations between users
and sessions, which allows local users to bypass CIFS share authentication
by leveraging a mount of a share by a different user.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 8.04 | noarch | linux | < 2.6.24-30.96 | UNKNOWN |
ubuntu | 10.04 | noarch | linux | < 2.6.32-34.73 | UNKNOWN |
ubuntu | 10.10 | noarch | linux | < 2.6.35-31.62 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-ec2 | < 2.6.32-318.37 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-fsl-imx51 | < 2.6.31-612.30 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-lts-backport-maverick | < 2.6.35-31.62~lucid1 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-lts-backport-natty | < 2.6.38-1.27~lucid1 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-mvl-dove | < 2.6.32-218.35 | UNKNOWN |
ubuntu | 10.10 | noarch | linux-mvl-dove | < 2.6.32-418.35 | UNKNOWN |
ubuntu | 10.10 | noarch | linux-ti-omap4 | < 2.6.35-903.27 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2011-1585
nvd.nist.gov/vuln/detail/CVE-2011-1585
rhn.redhat.com/errata/RHSA-2011-1253.html
security-tracker.debian.org/tracker/CVE-2011-1585
ubuntu.com/security/notices/USN-1203-1
ubuntu.com/security/notices/USN-1208-1
ubuntu.com/security/notices/USN-1216-1
ubuntu.com/security/notices/USN-1218-1
ubuntu.com/security/notices/USN-1256-1
ubuntu.com/security/notices/USN-1268-1
ubuntu.com/security/notices/USN-1271-1
ubuntu.com/security/notices/USN-1272-1
ubuntu.com/security/notices/USN-1278-1
ubuntu.com/security/notices/USN-1280-1
www.cve.org/CVERecord?id=CVE-2011-1585