// For flags

CVE-2011-1678

samba/cifs-utils: mount.cifs and umount.cifs fail to anticipate RLIMIT_FSIZE

Severity Score

3.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

smbfs en Samba v3.5.8 y anteriores, un intento de utilizar (1) mount.cifs para añadir al fichero /etc/mtab y (2) umount.cifs para añadir al fichero /etc/mtab.tmp sin primero verificar si los límites del recursos pudieran interferir, permitiría a usuarios locales provocar la corrupción del fichero /etc/mtab a través de un proceso con un valor RLIMIT_FSIZE pequeño, un asunto relacionado con CVE-2011-1089.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-04-09 CVE Reserved
  • 2011-04-10 CVE Published
  • 2024-04-26 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
References (21)
URL Tag Source
http://openwall.com/lists/oss-security/2011/03/04/10 Mailing List
http://openwall.com/lists/oss-security/2011/03/04/11 Mailing List
http://openwall.com/lists/oss-security/2011/03/04/12 Mailing List
http://openwall.com/lists/oss-security/2011/03/04/9 Mailing List
http://openwall.com/lists/oss-security/2011/03/05/3 Mailing List
http://openwall.com/lists/oss-security/2011/03/05/7 Mailing List
http://openwall.com/lists/oss-security/2011/03/07/9 Mailing List
http://openwall.com/lists/oss-security/2011/03/14/16 Mailing List
http://openwall.com/lists/oss-security/2011/03/14/5 Mailing List
http://openwall.com/lists/oss-security/2011/03/14/7 Mailing List
http://openwall.com/lists/oss-security/2011/03/15/6 Mailing List
http://openwall.com/lists/oss-security/2011/03/22/4 Mailing List
http://openwall.com/lists/oss-security/2011/03/22/6 Mailing List
http://openwall.com/lists/oss-security/2011/03/31/3 Mailing List
http://openwall.com/lists/oss-security/2011/03/31/4 Mailing List
http://openwall.com/lists/oss-security/2011/04/01/2 Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=688980 Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/66702 Vdb Entry
URL Date SRC
URL Date SRC
URL Date SRC
http://www.mandriva.com/security/advisories?name=MDVSA-2011:148 2017-08-17
https://access.redhat.com/security/cve/CVE-2011-1678 2011-08-29
https://bugzilla.redhat.com/show_bug.cgi?id=695925 2011-08-29
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 <= 3.5.8
Search vendor "Samba" for product "Samba" and version " <= 3.5.8"
-
Affected