CVE-2011-3585

MEDIUM

4.7

Descricao

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.

Detalhes CVE

Pontuacao CVSS v3.14.7

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueLOCAL

ComplexidadeHIGH

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado12/31/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

redhat:enterprise_linuxsamba:samba

Fraquezas (CWE)

CWE-362

Referencias

https://bugzilla.redhat.com/show_bug.cgi?id=742907(secalert@redhat.com)

https://bugzilla.samba.org/show_bug.cgi?id=7179(secalert@redhat.com)

https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200(secalert@redhat.com)

https://www.openwall.com/lists/oss-security/2011/09/27/1(secalert@redhat.com)

https://www.openwall.com/lists/oss-security/2011/09/30/5(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=742907(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.samba.org/show_bug.cgi?id=7179(af854a3a-2127-422b-91ae-364da2661108)

https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2011/09/27/1(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2011/09/30/5(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.