CVE-2011-1585 in Kernel
Zusammenfassung (Englisch)
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
05.04.2011
Veröffentlichung
08.06.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 64248 | Linux Kernel cifs_find_smb_ses erweiterte Rechte | 264 | Proof-of-Concept | Offizieller Fix | CVE-2011-1585 |