Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-5871
HistoryDec 11, 2006 - 11:28 p.m.

CVE-2006-5871

2006-12-1123:28:00
mitre
web.nvd.nist.gov
40
cve-2006-5871
smbfs
linux kernel
unix extensions
security bypass
nvd

CVSS2

4.1

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

30.4%

JSON

smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.

Affected configurations

Nvd
Node
linuxlinux_kernelMatch2.4.33
OR
linuxlinux_kernelMatch2.6.8
VendorProductVersionCPE
linuxlinux_kernel2.6.8cpe:/o:linux:linux_kernel:2.6.8:::
linuxlinux_kernel2.4.33cpe:/o:linux:linux_kernel:2.4.33:::

Related

nvd 1
cvelist 1
osv 2
debian 2
openvas 7
nessus 5
suse 1
redhat 1
centos 1
nvd
nvd
CVE-2006-5871
2006-12-11 23:28:00
cvelist
cvelist
CVE-2006-5871
2006-12-11 23:00:00
osv
osv
kernel-source-2.4.27 - several
2006-12-17 00:00:00
kernel-source-2.6.8 - several
2006-12-10 00:00:00
debian
debian
[SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities
2006-12-17 14:07:46
[SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities
2006-12-10 21:06:55
openvas
openvas
Debian: Security Advisory (DSA-1237)
2008-01-17 00:00:00
Debian Security Advisory DSA 1237-1 (kernel-source-2.4.27)
2008-01-17 00:00:00
Debian Security Advisory DSA 1233-1 (kernel-source-2.6.8)
2008-01-17 00:00:00
nessus
nessus
Debian DSA-1237-1 : kernel-source-2.4.27 - several vulnerabilities
2006-12-18 00:00:00
Debian DSA-1233-1 : kernel-source-2.6.8 - several vulnerabilities
2006-12-14 00:00:00
Ubuntu 5.10 / 6.06 LTS / 6.10 : linux-source-2.6.12/-2.6.15/-2.6.17 vulnerabilities (USN-395-1)
2007-11-10 00:00:00
suse
suse
remote denial of service in kernel
2007-06-14 16:33:34
redhat
redhat
(RHSA-2005:514) Updated kernel packages available for Red Hat Enterprise Linux 4 Update 2
2005-10-05 00:00:00
centos
centos
kernel security update
2005-10-05 16:21:56

CVSS2

4.1

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

30.4%

JSON
Related for CVE-2006-5871
nvd1cvelist1osv2debian2openvas7nessus5suse1redhat1centos1