oss-security - Re: CVE Request: samba, cifs-utils

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 30 Sep 2011 11:05:32 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: security@...ntu.com, coley@...us.mitre.org
Subject: Re: CVE Request: samba, cifs-utils



----- Original Message -----
> Hello,
> 
> I don't think this ever got a CVE:
> 
> https://bugzilla.samba.org/show_bug.cgi?id=7179
> 
> http://git.samba.org/?p=cifs-utils.git;a=commitdiff;h=810f7e4e0f2dbcbee0294d9b371071cb08268200
> 
> 
> When mount.cifs is setuid, unprivileged users can kill it, resulting in a
> denial of service from a stale lock file.
> 

Please use CVE-2011-3585.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.