CVE-2011-1585

🗓️ 08 Jun 2013 13:55:05Reported by redhatType

The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, allowing local users to bypass CIFS share authentication by leveraging a mount of a share by a different user

Reporter	Title	Published	Views	Family All 95
seebug.org	Linux kernel 2.6.x CIFS本地安全限制绕过漏洞	22 Nov 201100:00	–	seebug
seebug.org	Linux Kernel CIFS本地安全限制绕过漏洞	22 Nov 201100:00	–	seebug
Veracode	Authentication Bypass	10 Apr 202001:05	–	veracode
Cvelist	CVE-2011-1585	8 Jun 201310:00	–	cvelist
NVD	CVE-2011-1585	8 Jun 201313:05	–	nvd
Prion	Design/Logic Flaw	8 Jun 201313:05	–	prion
UbuntuCve	CVE-2011-1585	6 Oct 201100:00	–	ubuntucve
OpenVAS	Ubuntu Update for linux-ti-omap4 USN-1280-1	25 Nov 201100:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-1280-1)	25 Nov 201100:00	–	openvas
OpenVAS	Ubuntu Update for linux-fsl-imx51 USN-1271-1	25 Nov 201100:00	–	openvas

Nvd

Node

linux linux_kernelRange<2.6.36

Node

suse suse_linux_enterprise_serverMatch10sp4

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
openwall	www.openwall.com/lists/oss-security/2011/04/15/8
git	www.git.kernel.org/
ftp	www.ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
github	www.github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Jun 2013 13:05Current

7.2High risk

Vulners AI Score7.2

CVSS23.3

EPSS0.0004

CWE-264