Published: 08/06/2013 Updated: 13/02/2023

CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4

VMScore: 295

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:N

The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel prior to 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
suse suse linux enterprise server 10

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-3875 Vasiliy Kulikov discovered an issue in the Linux implementation of the Amateur Radio AX25 Level 2 protocol Local u ...

Several security issues were fixed in the kernel ...

Multiple kernel flaws have been fixed ...

Several security issues were fixed in the kernel ...

Multiple kernel flaws have been fixed ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=697394 http://www.openwall.com/lists/oss-security/2011/04/15/8 https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4ff67b720c02c36e54d55b88c2931879b7db1cd2 https://nvd.nist.gov https://www.debian.org/security/./dsa-2240 https://usn.ubuntu.com/1271-1/

CVE-2011-1585

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect