CVE-2011-1678
CVE-2011-1678
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
EPSS 0,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
cifs-utils Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:5.1-1
Actualiza a 2:5.1-1
cifs-utils Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:5.1-1
Actualiza a 2:5.1-1
cifs-utils Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:5.1-1
Actualiza a 2:5.1-1
samba Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Actualiza a 2:3.4.7~dfsg-2
samba Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Actualiza a 2:3.4.7~dfsg-2
samba Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 2:3.4.7~dfsg-2
Actualiza a 2:3.4.7~dfsg-2
Fuentes originales
- http://openwall.com/lists/oss-security/2011/03/14/5
- http://openwall.com/lists/oss-security/2011/03/04/9
- http://openwall.com/lists/oss-security/2011/03/22/6
- http://openwall.com/lists/oss-security/2011/03/22/4
- http://openwall.com/lists/oss-security/2011/03/05/7
- https://bugzilla.redhat.com/show_bug.cgi?id=688980
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:148
- http://openwall.com/lists/oss-security/2011/03/07/9
- http://openwall.com/lists/oss-security/2011/04/01/2
- http://openwall.com/lists/oss-security/2011/03/04/10
- http://openwall.com/lists/oss-security/2011/03/14/16
- http://openwall.com/lists/oss-security/2011/03/31/4
- http://openwall.com/lists/oss-security/2011/03/04/12
- http://openwall.com/lists/oss-security/2011/03/14/7
- http://openwall.com/lists/oss-security/2011/03/04/11
- http://openwall.com/lists/oss-security/2011/03/05/3
- http://openwall.com/lists/oss-security/2011/03/31/3
- http://openwall.com/lists/oss-security/2011/03/15/6
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66702
- https://nvd.nist.gov/vuln/detail/CVE-2011-1678