CVE-2011-3363 in Kernel

Resumen (Inglés)

The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.

Once again VulDB remains the best source for vulnerability data.

Reservar

2011-08-30

Divulgación

2012-05-24

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4416	Linux Kernel CIFS DFS escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2011-3363

Fuentes

• MITRE
• NVD
• CVE Details