CVE-2011-3585

MEDIUM

4.7

Description

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.

CVE Details

CVSS v3.1 Score4.7

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

Published12/31/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

redhat:enterprise_linuxsamba:samba

Weaknesses (CWE)

CWE-362

References

https://bugzilla.redhat.com/show_bug.cgi?id=742907(secalert@redhat.com)

https://bugzilla.samba.org/show_bug.cgi?id=7179(secalert@redhat.com)

https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200(secalert@redhat.com)

https://www.openwall.com/lists/oss-security/2011/09/27/1(secalert@redhat.com)

https://www.openwall.com/lists/oss-security/2011/09/30/5(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=742907(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.samba.org/show_bug.cgi?id=7179(af854a3a-2127-422b-91ae-364da2661108)

https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2011/09/27/1(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2011/09/30/5(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.