Vulnerability CVE-2011-3585
Published: 2019-12-31

Description:
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.

Type:

CWE-362

CVSS2 => (AV:L/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
1.9/10
2.9/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Samba -> Samba 
Redhat -> Enterprise linux 

 References:
https://bugzilla.redhat.com/show_bug.cgi?id=742907
https://bugzilla.samba.org/show_bug.cgi?id=7179
https://git.samba.org/?p=cifs-utils.git;a=commitdiff;h=810f7e4e0f2dbcbee0294d9b371071cb08268200
https://www.openwall.com/lists/oss-security/2011/09/27/1
https://www.openwall.com/lists/oss-security/2011/09/30/5
Copyright 2024, cxsecurity.com

 

Back to Top