CVE-2011-1585 in Linux Kernel
Summary
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
Reservation
04/05/2011
Disclosure
06/08/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 64248 | Linux Kernel cifs_find_smb_ses access control | 264 | Proof-of-Concept | Official fix | CVE-2011-1585 |