| Max CVSS | 6.8 | Min CVSS | 1.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-3585 | 1.9 |
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
|
13-02-2023 - 00:19 | 31-12-2019 - 20:15 | |
| CVE-2011-2724 | 1.2 |
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denia
|
13-02-2023 - 00:19 | 06-09-2011 - 16:55 | |
| CVE-2011-2694 | 2.6 |
Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the usernam
|
31-10-2022 - 15:02 | 29-07-2011 - 20:55 | |
| CVE-2011-2522 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators for requests that (1) shut down daemons, (2) start
|
29-08-2022 - 20:20 | 29-07-2011 - 20:55 | |
| CVE-2011-1678 | 3.3 |
smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigge
|
17-08-2017 - 01:34 | 10-04-2011 - 02:55 |