← Voltar para CVEs

CVE-2007-3843

N/A

Descricao

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado8/9/2007

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

linux:linux_kernel

Referencias

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595(secalert@redhat.com)

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1(secalert@redhat.com)

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html(secalert@redhat.com)

http://secunia.com/advisories/26366(secalert@redhat.com)

http://secunia.com/advisories/26647(secalert@redhat.com)

http://secunia.com/advisories/26760(secalert@redhat.com)

http://secunia.com/advisories/27436(secalert@redhat.com)

http://secunia.com/advisories/27747(secalert@redhat.com)

http://secunia.com/advisories/27912(secalert@redhat.com)

http://secunia.com/advisories/28806(secalert@redhat.com)

http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm(secalert@redhat.com)

http://www.debian.org/security/2007/dsa-1363(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0705.html(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2007-0939.html(secalert@redhat.com)

http://www.securityfocus.com/bid/25244(secalert@redhat.com)

http://www.ubuntu.com/usn/usn-510-1(secalert@redhat.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670(secalert@redhat.com)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595(af854a3a-2127-422b-91ae-364da2661108)

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26366(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26647(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26760(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27436(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27747(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27912(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/28806(af854a3a-2127-422b-91ae-364da2661108)

http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2007/dsa-1363(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0705.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2007-0939.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/25244(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/usn-510-1(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.