CVE-2010-0747

Related Files

Mandriva Linux Security Advisory 2010-090

Posted May 5, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-090 - client/mount.cifs.c in mount.cifs in smbfs in Samba does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. client/mount.cifs.c in mount.cifs in smbfs in Samba allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file. The updated packages have been patched to correct these issues.

tags | advisory, denial of service, arbitrary, local

systems | linux, mandriva

advisories | CVE-2010-0547, CVE-2010-0747

SHA-256 | ccfda0113d596bf024ec0360c4b46676053de6e3625e6ae746bb90f51efa9c31

Download | Favorite | View