NVD

Id
9457  
Name
CVE-2011-2724  
Description
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-09-06  
Modified Date
2011-10-25  
Seq
2011-2724  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54074 9457 CVE-2011-2724 http://comments.gmane.org/gmane.linux.kernel.cifs/3827  View
54075 9457 CVE-2011-2724 http://git.samba.org/?p=cifs-utils.git;a=commit;h=1e7a32924b22d1f786b6f490ce8590656f578f91  View
54076 9457 CVE-2011-2724 [oss-security] 20110729 CVE-2011-2724 assignment notification -- samba -- incomplete fix for CVE-2010-0547 issue  View
54077 9457 CVE-2011-2724 MDVSA-2011:148  View
54078 9457 CVE-2011-2724 RHSA-2011:1220  View
54079 9457 CVE-2011-2724 RHSA-2011:1221  View
54080 9457 CVE-2011-2724 1025984  View
54081 9457 CVE-2011-2724 https://bugzilla.redhat.com/show_bug.cgi?id=726691  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31980 JVNDB-2011-002220 Samba の mount.cifs 内にある check_mtab 関数におけるサービス運用妨害 (mtab 破損) の脆弱性 Samba の smbfs の mount.cifs 内にある client/mount.cifs.c の check_mtab 関数は、デバイス名、およびマウントポイントの文字列が、有効なキャラクタで構成されていることを確認しないため、サービス運用妨害 (mtab 破損) 状態となる脆弱性が存在します。 CVE-2011-2724 50631 CVE-2011-2724 9457 1.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002220.html 2011-08-29 2011-09-16 View