Login Request a demo
Unscored severity · published Sep 6, 2011
CVE-2011-2724
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Samba · Samba
through 3.5.10; 1.9.17; 1.9.17; 1.9.17; 1.9.17; 1.9.17; +34 more · source: NVD
Affected product
SA
Samba
Samba
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2724
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2724
Patch
http://comments.gmane.org/gmane.linux.kernel.cifs/3827
git.samba.org
http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91
Patch
http://openwall.com/lists/oss-security/2011/07/29/9
Vendor Advisory
http://secunia.com/advisories/45798
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:148
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-1220.html
More from Samba
9.8
CVE-2017-7494
Samba Remote Code Execution Vulnerability
5.5
CVE-2020-1472
Netlogon Elevation of Privilege Vulnerability
9.8
CVE-2026-4408
Samba: remote code execution in samr
9.8
CVE-2023-3961
A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory
9.8
CVE-2022-45141
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable…