CVEvulnerability
CVE-2011-3585
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-362
Description
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
Affected configurations
• samba samba 3.6.0
• redhat enterprise linux 4.0
• redhat enterprise linux 5.0
• redhat enterprise linux 6.0
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=742907 Issue Tracking, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=7179 Issue Tracking, Vendor Advisory
- https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200 git.samba.org
- https://www.openwall.com/lists/oss-security/2011/09/27/1 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/09/30/5 Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=742907 Issue Tracking, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=7179 Issue Tracking, Vendor Advisory
- https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200 git.samba.org
- https://www.openwall.com/lists/oss-security/2011/09/27/1 Mailing List, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/09/30/5 Mailing List, Third Party Advisory